SecPoint

Hjem
Danmark
Copenhagen
SecPoint

SecPoint delivers the
Best Cyber Security Products. https://www.secpoint.com SecPoint delivers the Best IT Security Products.

Portable Penetrator WPA WPA2 Cracker https://www.secpoint.com/portable-penetrator.html

SecPoint Penetrator Vulnerability Scanner - features Whitelabeling & MSP https://www.secpoint.com/penetrator.html

SecPoint Protector UTM Network Security Appliance Firewall, VPN tunneling, IPsec, PPTP. https://www.secpoint.com/protector.html

SecPoint Cloud Penetrator Vulnerability Scanner
https://www.secpoint.com/cloud-penetrator.html

23/10/2026

Critical GitLab Vulnerability: CVE-2026-110264 (CVSS 10.0)

GitLab disclosed a critical flaw on 21 October 2026 affecting self-managed GitLab Community and Enterprise Edition.
Under certain conditions, an unauthenticated attacker could execute code through an integer overflow in the regular-expression compiler.

Is your GitLab infrastructure exposed?
Scan with SecPoint Penetrator™.

SecPoint Penetrator helps identify exposed services, outdated software, and security weaknesses through actionable vulnerability reports.
A GitLab-specific version assessment is undergoing validation and can flag potentially affected installations when trustworthy version information is available.

Upgrade affected systems to GitLab 19.5.1, 19.4.3, 19.3.6, or the applicable patched backport (19.2.9, 19.1.9, 19.0.10, 18.11.13).

Request a product demo: https://www.secpoint.com/contact-us.php

Become a SecPoint partner: https://www.secpoint.com/partner-signup.php

22/10/2026

Is your Node.js application vulnerable to CVE-2026-111497?

A newly disclosed High-severity vulnerability in the Node.js Brotli decoder could allow remote code ex*****on when attacker-controlled compressed data reaches the affected component.

Don't leave your infrastructure unchecked. Scan with SecPoint Penetrator™.

SecPoint Penetrator helps organizations discover exposed services, identify outdated software and prioritize vulnerabilities with actionable security reports.

Our new Node.js assessment is undergoing release validation and can identify potentially affected runtime versions when reliable version information is available.

Update Node.js to 22.23.4, 24.22.1 or 26.12.1, as applicable.

Request a SecPoint Penetrator demonstration:
https://www.secpoint.com/contact-me.php

**Become a SecPoint partner:**
https://www.secpoint.com/partner-signup.php

21/10/2026

PHP critical vulnerabilities: scan with SecPoint® Penetrator™

PHP has released fixes for CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that can allow unauthenticated remote code ex*****on. Apache mod_php deployments are particularly exposed.

Scan with SecPoint Penetrator to help identify potentially affected PHP systems and prioritise remediation. Detection depends on sufficient system information being available.

Affected unpatched upstream versions → first fixed release

8.2.0–8.2.34 → 8.2.35
8.3.0–8.3.35 → 8.3.36
8.4.0–8.4.26 → 8.4.27
8.5.0–8.5.11 → 8.5.12

Temporary hardening is not a complete fix. Upgrade promptly, confirm vendor backports where applicable, and verify the PHP runtime serving each website. Older branches require appropriate vendor fixes or migration to a supported release.

Scan. Patch. Verify.

Test SecPoint Penetrator:
https://www.secpoint.com/contact-me.html

Become a SecPoint partner:
https://www.secpoint.com/partner-signup.html

20/10/2026

PHP: Upcoming Critical Security Release

PHP’s security team has announced an upcoming release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2.

Public reporting identifies the issues as CVE-2026-109618 and CVE-2026-109619.

Technical details and affected-version information are scheduled for Wednesday, 21 October 2026 at 14:00 UTC.

PHP may release earlier if vulnerability details become public or active exploitation is detected.

Local release times:

Copenhagen / Stockholm: 16:00 CEST · London: 15:00 BST

New York: 10:00 EDT · San Francisco: 07:00 PDT

Dubai: 18:00 GST · Singapore: 22:00 SGT

SecPoint encourages organizations to review potentially affected systems, coordinate with hosting providers and prepare to apply the appropriate security updates promptly once available.

-2026-109619 -2026-109618

14/10/2026

🇬🇪 Exploring Georgia with SecPoint’s How They Hack You, from the impressive Chronicle of Georgia to panoramic views over Tbilisi’s Old Town and the Bridge of Peace, and the iconic Mother of Georgia (Kartlis Deda).

With her bowl of w**e welcoming friends and her sword ready to defend against enemies, Mother of Georgia offers a fitting reminder for the digital age: stay open and connected, but protect what matters.

At SecPoint, we bring that mindset to modern cyber defence: understand how attackers think, recognise the risks, and strengthen your digital defences. Wherever the journey takes us, cybersecurity awareness matters.

👉 Ready to strengthen your cyber defences? Learn more and contact SecPoint:
https://www.secpoint.com/contact-me.html

🤝 Grow your cybersecurity business. Sign up as a SecPoint partner:
https://www.secpoint.com/partner-signup.html

14/10/2026

Microsoft SQL Server: Remote Code Ex*****on Vulnerability

Microsoft disclosed CVE-2026-65674 on 13 October 2026, a high-severity vulnerability affecting specified SQL Server 2019, 2022 and 2025 releases.

The flaw involves deserialization of untrusted data and could allow an authenticated attacker with low privileges to execute code over the network.

This is not an unauthenticated attack.

Organizations should review potentially affected systems and apply Microsoft's security updates for the correct release and servicing branch.

Restrict unnecessary database exposure and review account permissions.

SecPoint has developed a new assessment for SecPoint Penetrator to help identify potentially affected SQL Server installations.

11/10/2026

🚨 Critical Citrix NetScaler Vulnerability Disclosed

Citrix has disclosed CVE-2026-107406, a critical vulnerability affecting NetScaler ADC and NetScaler Gateway, with a CVSS 4.0 score of 9.5.

The vulnerability could potentially allow remote code ex*****on or denial of service on affected systems.

Exploitation requires specific SAML Service Provider or Identity Provider configurations, depending on the installed version.

Citrix has released security updates, and organizations should review their NetScaler deployments and apply the relevant fixes.

At SecPoint, we continuously follow emerging cybersecurity threats to help organizations understand and assess their exposure.

11/10/2026

🚨 Critical Ollama Vulnerability: CVE-2026-103663

A critical security vulnerability has been disclosed in Ollama, the popular platform for running AI models locally and on private infrastructure.

The vulnerability allows unauthenticated attackers to exploit a path traversal weakness in the model-pull functionality, potentially writing malicious files outside the intended model directory.

Under specific deployment conditions, particularly affected Docker installations with writable executable paths, this could lead to remote code ex*****on following a server restart.

Ollama versions 0.34.2 through 0.34.x are potentially affected. Organizations should upgrade to version 0.35.0 or later and restrict unnecessary access to the Ollama API.

SecPoint Penetrator continues expanding its vulnerability assessment capabilities to address emerging threats across AI infrastructure.

08/10/2026

FortiMail security alert: actively exploited vulnerability

CVE-2026-104286 can allow an unauthenticated attacker to write arbitrary files through FortiMail’s web management interface. CERT-SE reports that the vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalogue.

SecPoint Penetrator includes an assessment for CVE-2026-104286 to help identify potentially affected FortiMail systems and prioritize remediation.

Review exposed installations, follow Fortinet’s mitigation guidance and investigate possible compromise. Scanning supports prioritization but does not replace incident investigation.

SecPoint Penetrator Information
https://www.linkedin.com/products/secpoint-penetrator/

SecPoint Penetrator Contact information
https://www.secpoint.com/contact-me.html

SecPoint Penetrator Partner Sign Up
https://www.secpoint.com/partner-signup.html

08/10/2026

Great meeting Fotis Chalios, Cybersecurity Specialist and Technical Manager at Data Ally, during The Future of Cybersecurity 2026 in Nicosia, Cyprus! 🇨🇾

It was a pleasure exchanging ideas about today's cybersecurity challenges, emerging threats, and practical security solutions.

Fotis brings impressive technical expertise and valuable insights into cybersecurity.

His experience is also valuable in helping organizations get the most out of the SecPoint Penetrator vulnerability scanning solution.

Always great to connect with knowledgeable cybersecurity specialists who are passionate about making organizations more secure.

Thanks to Fotis for the great conversation and to Data Ally for organizing an excellent event!

Adresse

Copenhagen

Website

https://www.secpoint.com/

Underretninger

Bliv den første, der får besked: Vi sender dig en e-mail, når SecPoint offentliggør nyheder og tilbud. Din e-mailadresse bliver ikke brugt til andre formål, og du kan til enhver tid afmelde dig.

Kontakt Virksomheden

Send en besked til SecPoint:

Del

Kategori

Softwarevirksomhed