WordPress sites can be attacked while they install a core-update fix
A race in WordPress’s core updater can let someone with no account run code during an update, including the update that installs the…
Topic
CISA KEV
SonicWall patches exploited SSL-VPN flaw that can skip SAML multi-factor login
SonicOS firewalls that use SAML sign-in for SSL-VPN can let someone holding credentials for another login method bypass SAML and its MFA. CISA…