Aardwolf Security

25/08/2026

Critical Keycloak Flaw Let Anyone Reset a Password and Take Over Any Account

https://aardwolfsecurity.com/keycloak-password-reset-flaw/

15/07/2026

Microsoft rated its own SharePoint flaw, CVE-2026-56164, as 5.3 out of 10. Medium severity. The National Vulnerability Database rated the same bug 9.8. Critical.

A Microsoft flaw rated medium severity is already under active attack. Why vulnerability severity ratings are falling behind AI-accelerated exploits.

13/07/2026

Google's Threat Analysis Group found a critical Zimbra XSS vulnerability in the Classic Web Client that lets a crafted email hijack a live session. Zimbra ha…

10/07/2026

A Windows Defender vulnerability sat publicly exploitable for nearly a month. Microsoft took that long to ship a fix.

A local Windows Defender vulnerability, CVE-2026-50656, let any logged-in user reach SYSTEM for nearly 29 days before Microsoft shipped a fix.

09/07/2026

https://aardwolfsecurity.com/linux-kernel-patching-ghostlock/

GhostLock's real failure was Linux kernel patching, not the bug itself. See why an eleven-week gap left most businesses exposed to root exploits.

08/07/2026

Does your helpdesk use BeyondTrust Remote Support or Privileged Remote Access? Then there is a patch you need this week.

A new privileged remote access vulnerability in BeyondTrust lets attackers skip login entirely. Here is a practical checklist for IT teams to act on now.

20/06/2026

Is Your EDR Actually Running? How Ransomware Groups Disable It Before You Notice

Ransomware gangs now ship EDR killer tools to affiliates to disable your security before encrypting files. Here is what to test in your defences right now.

19/06/2026

FortiBleed Shows Patching Is Not Enough to Protect Your Fortinet VPN

FortiBleed exposed the Fortinet VPN breach hiding in plain sight. The NCSC warning reveals why patching alone fails and what UK businesses must fix now.

18/06/2026

What the NCSC’s 75% State Threat Figure Means for Your Business

State-sponsored cyber attacks hit 75% of UK CNI in 2025-26. Find out who is really at risk and the three NCSC security priorities to act on now.

17/06/2026

Fortinet FortiSandbox Vulnerabilities: What IT Teams Need to Do Right Now

Three Fortinet FortiSandbox vulnerabilities rated CVSS 9.1 are under active exploitation. No authentication required. Check your version and patch now.