We’re aware of a security vulnerability (CVE-2026-87902) affecting WordPress websites. If exploited, this vulnerability could allow an attacker to gain control of an affected WordPress site. The vulnerability affects all WordPress versions before 7.1.2. What you need...
PaperCut has released a new patch for PaperCut NG/MF to address multiple vulnerabilities that are currently being exploited. If you are using this product, we recommend that you upgrade your PaperCut application to the latest version. Please follow the instructions on...
We’re aware of two security vulnerabilities (CVE-2026-63030 and CVE-2026-60137) affecting WordPress websites. If exploited together, these vulnerabilities could allow an unauthenticated attacker to perform SQL injection and potentially gain remote code execution (RCE)...
We’re aware of a critical vulnerability in Palo Alto’s GlobalProtect VPN application used under our Remote Access solution. If exploited, a remote attacker could connect to school networks as a VPN user - you can find more information in Palo Alto’s advisory. It’s...
We’re aware of a critical vulnerability (CVE-2026-0300) affecting the User-ID Authentication Portal (Captive Portal) in Palo Alto’s PAN-OS software, which is a web-based login page that enables user identification for unknown traffic on a network. The vulnerability...
We’re aware of a global issue affecting Microsoft SharePoint services, which could allow a remote unauthenticated attacker to access your server. Systems impacted: Microsoft SharePoint Enterprise Server 2016 - 16.0.0 to 16.0.5535.1001 Microsoft SharePoint Server 2019...
We’re aware of the AirSnitch vulnerabilities present in wireless networking equipment from multiple vendors, including RUCKUS. To exploit the vulnerability, an attacker needs a connection to the wireless network they’re targeting. This would require the attacker to be...
The National Cyber Security Centre (NCSC) is advising organisations to be increasingly vigilant, following an increase in denial of service (DoS) and brute forcing activities in relation to the situation in Iran. Denial of service is an attempt to make an online...
We're aware that Lumma Stealer malware has affected some New Zealanders’ online accounts, as reported by the NCSC. We are monitoring the situation and will contact you directly if we see anything suspicious. Find out more and their recommendations via the NCSC alert -...
We’re aware of a vulnerability impacting Windows users. CVE-2024-4577 is a remote code execution (RCE) flaw in the PHP-CGI implementation of PHP on Windows. Successful exploitation enables unauthenticated attackers to execute arbitrary code and can lead to complete...