If you're running n8n, patch it now. CISA flagged a CVSS 9.8 RCE being actively exploited in the wild. n8n touches your APIs, databases, and internal tools. One compromised workflow and attackers own everything it connects to. Versions before 1.19.4 are vulnerable. #cybersecurity #infosec #n8n

🔐 Daily Operational Security Brief: Thursday, March 12

⚠️ THREAT LEVEL: CRITICAL 2 actively exploited CVSS 9.8 vulnerabilities are being targeted in the wild. One hitting workflow automation infrastructure, the other mass-scanning 400k+ WordPress sites.

open.substack.com

California just mandated that EVERY operating system — Windows, macOS, Linux, SteamOS — must ask users their birth date during setup starting Jan 2027 (AB 1043). Some distros are already talking compliance. Others are banning Californians entirely.

SmarterMail auth bypass is now in active ransomware playbooks. One unauthenticated request = full server takeover. Also in today's brief: Juniper PTX root RCE and Trend Micro Apex One critical flaws. All three CVSS 9.8. All three need patching now.

🔐 Daily Operational Security Brief: Friday, February 27

⚠️ THREAT LEVEL: CRITICAL A SmarterMail auth bypass is now confirmed in active ransomware campaigns, and critical RCEs in Juniper PTX routers and Trend Micro Apex One demand immediate patching across

open.substack.com

🚨 CVSS 10.0 — Cisco SD-WAN zero-day No credentials needed. One request = full admin on your SD-WAN fabric. Exploited since 2023. All deployments affected. Patch now. Restrict NETCONF access. Check logs back to 2023. CVE-2026-20127 #CiscoSecurity #infosec #blueteam Full brief → link in bio

🚨 CISA just added FileZen CVE-2026-25108 to the KEV catalog. Command injection via HTTP after login, actively exploited and linked to ransomware in Japan. If you run FileZen v5.0.0-5.0.10, patch to v5.0.11 now. Full brief + 2 more threats → link in bio

Orca just disclosed "RoguePilot" hidden instructions in a GitHub Issue silently hijack Copilot when a dev opens a Codespace. No click. Full repo takeover. Patched now but the real issue: AI agents can't tell trusted input from an attack. Prompt injection is the new supply chain threat.

🚨 Fake Zoom "update" emails silently installing surveillance malware. Keylogging, screen recording, file access, everything. Looks legit. Runs silent. Zoom NEVER updates via email. Only through the app. Full brief + 2 more threats → link in bio