Abuse Shield: centralised server defence for Catalan SMEs
Attacks on servers no longer depend on someone discovering a brand-new flaw. Recent incidents show that the real shift is one of speed and scale: auto...
Cybersecurity
Cybersecurity
System protection, vulnerabilities and incident prevention.
Bot for Telegram on WooCommerce: critical auth bypass
What it is and who it affectsThe plugin Bot for Telegram on WooCommerce for WordPress is affected by a critical authentication bypass that can lead to...
Linux Kernel CVE-2026-46300: patch now, it is exploited
What CVE-2026-46300 is and who it affectsCVE-2026-46300 is a vulnerability in the Linux Kernel, officially described as a missing initialisation of a...
VMware ESX CVE-2026-41709: insufficient logging exploited in the wild
What the flaw is and who it affectsBroadcom VMware ESX is affected by CVE-2026-41709, officially described as the Broadcom VMware ESX Insufficient Log...
Jupiter X Core: critical auth bypass in WordPress
What it is and who is affectedThe Jupiter X Core plugin for WordPress carries a critical authentication bypass, tracked as CVE-2026-106013. It affects...
Google Brotli CVE-2026-111497: critical flaw already exploited
What it is and who is affectedGoogle Brotli is a compression library used far beyond browsers: it sits inside web servers, content delivery layers, pr...
Adobe Commerce and Magento: critical CVE-2026-48356
What it is and who is affectedCVE-2026-48356 is an unrestricted upload of a file with a dangerous type in Adobe Commerce and Magento, classified as CW...
PHP2Shell: patching fast is only half the defence
When a single language becomes everyone's problemThe disclosure of the PHP2Shell vulnerabilities — tracked as CVE-2026-109618 and CVE-2026-109619 — la...
PHP CVE-2026-109619: critical RCE exploited in the wild
What it is and who is affectedThe PHP Group has disclosed a critical flaw tracked as CVE-2026-109619, officially named the PHP Stale Internal Request-...
PHP CVE-2026-109618: critical RCE exploited in the wild
What the flaw is and who it affectsCVE-2026-109618, published in the NIST National Vulnerability Database on 21 October 2026, is a memory corruption v...