SecurityNews Former employees often retain account access after leaving A US survey of 1,000 former employees shows 79 per cent kept access to work accounts after leaving. Small organisations leave accounts open more often than large ones. 28 October 2026
SecurityNews Patchwork – Wednesday 28 October This edition focuses on WatchGuard, with eighteen Fireware OS advisories including seven critical pre-auth flaws, and Veeam, which fixes an unauthenticated authorisation bypass in Backup & Replication 13. 28 October 2026
SecurityNews Arctic Wolf adds Shadow AI Discovery to Aurora platform Arctic Wolf adds Shadow AI Discovery, new assistant capabilities and integrations to its Aurora Superintelligence Platform. Connections with Veeam and Cloudflare, among others, broaden monitoring. 27 October 2026
SecurityNews Patchwork – Tuesday 27 October Critical PHP flaws are being actively exploited, attackers steal Microsoft 365 tokens despite MFA and Tailscale SSH awaits a patch for privilege escalation to root. 27 October 2026
SecurityNews Nearly one in three SME websites runs outdated software Bureau Imago measured 1,280 Dutch SME websites: 30.5 per cent run outdated software. Lagging WordPress plugins and the end of PHP 8.2 support demand administrators' attention. 26 October 2026
SecurityNews WatchGuard advises CIOs to restrict the permissions of AI agents WatchGuard advises CIOs to assess the permissions of AI agents in three steps. The company points to prompt injection and integrations via shadow AI as risks. 26 October 2026
SecurityNews Patchwork – Monday 26 October Actively exploited flaws in Arista VeloCloud Orchestrator and Collabora Online, a firewall campaign by k0t, a CVSS 10.0 GitLab flaw and an unpatched Tailscale SSH escalation. 26 October 2026
SecurityNews Patchwork – Sunday 25 October Attackers exploit critical flaws in Arista VeloCloud Orchestrator and Collabora Online for Nextcloud, breach Fortinet and Palo Alto Networks firewalls, while PHP warns of a new RCE risk. 25 October 2026
SecurityNews Patchwork – Saturday 24 October PHP2Shell: two critical RCE flaws in PHP are being actively exploited. Patches are available for PHP 8.2 to 8.5. Read what MSPs and IT administrators should do now. 24 October 2026
SecurityNews Ten per cent of organisations worldwide targeted by PHP2Shell attacks Since the PHP2Shell vulnerabilities leaked, Check Point Research has seen attack attempts at 10% of organisations worldwide. A CMS update won't suffice; PHP must be patched server-side. 23 October 2026
