Jones Web Designs & Development is now The Jones Foundry. What it means for clients
Breaches, vulnerabilities, scams, and patches you should know about, with the practical steps that keep your site and your data safe.
CISA added two critical PHP flaws tracked as PHP2Shell to its Known Exploited Vulnerabilities Catalog after exploitation was observed. Federal agencies must patch; other organizations should prioritize checks and remediation.
A critical flaw in the Brotli decoder, tracked as CVE-2026-111497 and called HTTP2Shell, can corrupt memory and enable remote code execution; affected projects have released patches and administrators should prioritize updates.
CISA added two critical flaws in Collabora Online and Arista VeloCloud to its Known Exploited Vulnerabilities list after confirming active attacks in the wild.
A memory corruption bug in Google's Brotli decoder can crash software or let attackers run code in several runtimes and proxies. The Hacker News reports fixes exist; update and restart services.
A campaign that targeted Fortinet and Palo Alto firewall and VPN appliances exposed more than 70,000 device and LDAP credentials, according to The Hacker News and a joint investigation by Group-IB and NyxLab.
Splunk and SolarWinds released updates addressing code execution, privilege escalation, denial-of-service, and information disclosure issues. Apply the fixes and review access controls to reduce risk.
PHP announced out-of-cycle security updates for two critical remote code execution flaws after partial details leaked; hosts running PHP must install the fixes and follow short-term mitigations.
Downloads of Rank Math PRO 3.0.123 from the official site were infected with malware that installs a persistent backdoor. Sites that activated the plugin between Oct 15 20:02 UTC and Oct 16 07:12 UTC should assume compromise and follow…
F5 released emergency patches for three critical NGINX flaws that let attackers execute code or cause DoS. The brief explains the risks and steps to protect your sites now.
Attackers used ConnectWise Cloud Backup application identities to sign in to Microsoft 365 tenants, accessing mail, files, and Teams data in some cases. Administrators should check service principal sign-ins and credentials now.
According to The Hacker News, a compromised ConnectWise Cloud Backup app credential was used to obtain Microsoft Graph tokens and sign in to customer tenants, affecting every tenant where the app is installed.
Security tools may show an employee logged into a personal ChatGPT account while your company pays for an Enterprise seat. BleepingComputer outlines how to confirm identity, check what was sent, and stop prompt-level leaks.
