CISA has ended its weekly vulnerability bulletin. Update your patch routine
CISA retired its weekly bulletin on 28 September. Teams that relied on it need to change subscriptions and decide which vulnerabilities deserve attention first.
Topic
Security
Articles about Security.
Zammad 7.2.2 fixes a package-specific privilege escalation flaw
Zammad's 8 October security update affects self-hosted DEB and RPM installations. Check how your helpdesk was installed before deciding what needs updating.
WordPress 7.1.3 closes seven security gaps. Check your sites have updated
WordPress's 6 October release includes seven security fixes. Site owners and agencies should confirm the update landed, then check the parts visitors depend on.
How to secure SSH access to a Linux server
SSH is essential for remote server administration, but a secure setup depends on more than changing the default port. This guide covers individual accounts, key-based login, least privilege, firewall rules and a safe way to change SSH settings.
MFA for small businesses: which sign-in methods should you choose?
Multifactor authentication adds a second check when a password is stolen, but the available methods do not offer equal protection. Here is how to prioritise accounts, choose stronger factors and plan recovery.
A small business cyber incident: what to do first
When a website, email account or server behaves unexpectedly, a clear first-response plan helps preserve evidence and coordinate recovery. This guide covers the first actions to take and the preparation that makes them easier.
ASOS investigates app alert and possible customer data exposure
A threatening app alert has put ASOS's customer communication systems under scrutiny. Here is what the retailer has confirmed and what businesses can learn.