cPanel CVE-2026-41940 — Patch Your Server Today, It’s Already Being Exploited

A critical authentication bypass in cPanel and WHM (CVSS 9.8) is being actively exploited. If your business has a website on a

Comments off

LiteLLM AI Gateway Under Active Attack — Patch CVE-2026-42208 Today

A critical pre-auth SQL injection bug in the popular LiteLLM AI gateway is being exploited in the wild. Patch to 1.83.7-stable now

Comments off

Windows Shell Bug CVE-2026-32202 Now Confirmed Under Active Attack — Patch This Week

Microsoft has updated its advisory for CVE-2026-32202 to confirm active exploitation. Here's what Australian businesses need to do this week.

Comments off

SharePoint Spoofing Bug CVE-2026-32201 — CISA’s Federal Patch Deadline Is Today

SharePoint's pre-auth spoofing bug CVE-2026-32201 is on CISA's KEV with a federal patch deadline of 28 April 2026. Here's what Australian businesses

Comments off

SimpleHelp RMM Flaws Added to CISA KEV — Patch Before MSPs Get Hit Again

CISA has added two SimpleHelp RMM vulnerabilities to its KEV catalog after ransomware groups exploited them to compromise MSPs. Australian SMBs need

Comments off

Microsoft Ships Emergency .NET 10.0.7 Patch for ASP.NET Core Cookie Forgery Bug

Microsoft has pushed an out-of-band .NET 10.0.7 update to fix CVE-2026-40372, a critical ASP.NET Core flaw that lets attackers forge authentication cookies.

Comments off

WordPress Breeze Cache Under Active Attack — Patch CVE-2026-3844 Today

A critical unauthenticated file-upload flaw (CVE-2026-3844) in the Breeze Cache WordPress plugin is under active attack. If you run WordPress, check today.

Comments off

OAuth2 Proxy Hit by Critical Auth Bypass — Patch CVE-2026-40575 Now

A critical CVSS 9.1 authentication bypass in OAuth2 Proxy lets unauthenticated attackers spoof a header and slip past login. Upgrade to 7.15.2

Comments off

CISA Adds 8 Exploited Bugs to KEV — PaperCut, Quest KACE and Zimbra in the Firing Line

CISA added eight actively exploited vulnerabilities to its KEV catalogue on 20 April. Three names Australian SMBs need to patch today: PaperCut

Comments off

SharePoint Zero-Day Under Active Attack — Patch CVE-2026-32201 Now

A SharePoint spoofing zero-day (CVE-2026-32201) is under active attack. If you run SharePoint Server 2016, 2019 or Subscription Edition, patch today.

Comments off

1300 425 548

1300 425 548

cPanel CVE-2026-41940 — Patch Your Server Today, It’s Already Being Exploited

LiteLLM AI Gateway Under Active Attack — Patch CVE-2026-42208 Today

Windows Shell Bug CVE-2026-32202 Now Confirmed Under Active Attack — Patch This Week

SharePoint Spoofing Bug CVE-2026-32201 — CISA’s Federal Patch Deadline Is Today

SimpleHelp RMM Flaws Added to CISA KEV — Patch Before MSPs Get Hit Again

Microsoft Ships Emergency .NET 10.0.7 Patch for ASP.NET Core Cookie Forgery Bug

WordPress Breeze Cache Under Active Attack — Patch CVE-2026-3844 Today

OAuth2 Proxy Hit by Critical Auth Bypass — Patch CVE-2026-40575 Now

CISA Adds 8 Exploited Bugs to KEV — PaperCut, Quest KACE and Zimbra in the Firing Line

SharePoint Zero-Day Under Active Attack — Patch CVE-2026-32201 Now

Categories

About All IT Services

Connect with us

All IT Services Locations

Contact All IT Services

All IT Services Hours