Jones Web Designs & Development is now The Jones Foundry. What it means for clients
Breaches, vulnerabilities, scams, and patches you should know about, with the practical steps that keep your site and your data safe.
Security tools may show an employee logged into a personal ChatGPT account while your company pays for an Enterprise seat. BleepingComputer outlines how to confirm identity, check what was sent, and stop prompt-level leaks.
Palo Alto Networks issued updates for a high-severity PAN-OS RCE vulnerability that has been used in limited attacks. This briefing explains who is affected, what we know, and practical steps to reduce risk.
CISA says a zero-day authentication bypass in Ivanti Connect Secure is being used in the wild. Organizations should update, conduct forensic checks, and follow Ivanti recovery steps.
A high-severity authentication bypass zero-day in Ivanti Connect Secure is being used in real attacks. This briefing explains the scope, how attackers are chaining flaws, and immediate response steps.
GitLab warned of a maximum-severity remote code execution flaw in its CI/CD regular expression compiler and urged self-managed users to upgrade immediately. Here is what small orgs and public teams should check now.
Researchers say a new P7 DarkSword variant narrows its footprint, extracts keychain and wallet data on-device, and adds two-way command-and-control. Here is who it hit, how it spreads, and practical steps.
A maximum-severity SonicWall SMA1000 flaw is being exploited after a recent patch. If you use SMA1000 gateways, check exposure, apply vendor fixes, and review access controls.
Citrix has released fixes for CVE-2026-107406, a memory overflow that can allow remote code execution or denial of service when NetScaler is used for SAML. Public scans show many NetScaler devices exposed, so check and update immediately.
Cisco published advisories for five critical NX-OS flaws that can lead to remote code execution or denial of service on Nexus 3000 and 9000 switches when certain features are enabled.
Microsoft will add .msix and .msixbundle to Outlook's blocked attachments for Exchange Online users starting in early November, affecting Outlook on the web and the new Outlook for Windows.
A new campaign uses counterfeit ChatGPT‑style pages to harvest login details and multi‑factor codes from advertising professionals through a deceptive browser‑in‑the‑browser method.
Citrix released emergency updates for a NetScaler SAML zero-day, CVE-2026-88779, after targeted attacks caused service outages and researchers saw signs of possible code execution.
