PODCAST · business
The Daily CVE Update
by The Small Business Cyber Security Guy
The Daily CVE UpdateFrom The Small Business Cyber Security Guy PodcastNew software vulnerabilities are published every single day. Most of them get buried in technical databases that only security professionals ever read. By the time the average small business finds out about a serious flaw, it has already been used against businesses just like theirs.This daily 10-minute briefing changes that.Every weekday morning, we go through the latest vulnerability disclosures from the global CVE database and tell you, in plain language, which ones actually matter to your business. No jargon. No alphabet soup. Just a clear explanation of what is affected, how serious it is, and what you need to ask your IT support to do about it.Each episode includes a dedicated KEV Alert section covering any vulnerabilities that are confirmed as actively exploited in the wild right now. Not theoretical. Not “could be used one day.” These are the ones where attacks are already happening and your window to
Episodes
-
PHP2SHELL and Two Microsoft CVSS 10.0 Vulnerabilities
PHP2SHELL and Two Microsoft CVSS 10.0 Vulnerabilities On 22 October 2026, three critical security events converged: two maximum-severity PHP vulnerabilities allowing unauthenticated remote code execution, and two separate Microsoft Azure flaws each scoring CVSS 10.0. For UK small businesses…
more -
PHP2Shell: Critical Vulnerabilities Actively Exploited
PHP2Shell: Critical Vulnerabilities Actively Exploited Two critical PHP vulnerabilities, CVE-2026-1096118 and CVE-2026-1096119, both scored 9.8 out of 10, were patched on 21 October 2026. Within hours, attackers began probing for unpatched servers. These flaws allow unauthenticated remote code...
-
Plex Media Server Under Active Attack: Four Chained Vulnerabilities
Plex Media Server Under Active Attack: Four Chained Vulnerabilities On 20 October 2026, CISA added four Plex Media Server vulnerabilities to its Known Exploited Vulnerabilities catalogue, confirming active exploitation in the wild. The vulnerabilities can be chained together to achieve remote…
more -
Rank Math PRO Supply Chain Attack and H3C Router Exploits
Rank Math PRO Supply Chain Attack and H3C Router Exploits On 20 October 2026, two critical security incidents demand immediate attention from UK small businesses. First, a supply chain attack compromised Rank Math PRO, a widely used WordPress SEO plugin, delivering malware through legitimate…
more -
Hardcoded Credentials and Drupal RCE: Two Critical Patches You Need Today
Hardcoded Credentials and Drupal RCE: Two Critical Patches You Need Today Two critical vulnerabilities disclosed in the last 48 hours demand immediate attention from UK small businesses. CVE-2026-111998 affects Vanus event infrastructure with a severity score of 9.8, exploiting a hardcoded Bearer...
-
Active Exploitation, Perfect Scores, and Hard-Coded Camera Backdoors
Active Exploitation, Perfect Scores, and Hard-Coded Camera Backdoors Three critical vulnerabilities demand immediate attention from UK small businesses this week. CISA has confirmed active exploitation of CVE-2026-21589, affecting eight Atlassian products including Confluence and Jira, allowing...
-
MSP Backup Compromise, Cisco Email Flaw, and the 1,414-Patch Month
MSP Backup Compromise, Cisco Email Flaw, and the 1,414-Patch Month On 14 October 2026, CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalogue, three of which carry direct consequences for UK small businesses relying on managed service providers. The lead story concerns...
-
Ivanti VPN and Windows Shell Zero-Days Confirmed Exploited in the Wild
Ivanti VPN and Windows Shell Zero-Days Confirmed Exploited in the Wild On 14 October 2026, CISA confirmed active exploitation of two critical zero-day vulnerabilities: CVE-2026-104935 in Ivanti Connect Secure VPN and CVE-2026-96951 in Windows Shell. The Ivanti flaw allows complete authentication...
-
Legacy Routers, WordPress Exploits, and the Compression of Patch Windows
Legacy Routers, WordPress Exploits, and the Compression of Patch Windows Three critical vulnerabilities disclosed this week share a dangerous common thread: all carry working exploit code in the wild, and attackers are moving faster than most UK small businesses can patch. This episode examines...
-
HR Platform Bypasses Authentication, AI Tools Ship Default Admin Tokens
HR Platform Bypasses Authentication, AI Tools Ship Default Admin Tokens On 11 October 2026, three critical vulnerabilities were published to the National Vulnerability Database, exposing fundamental authentication failures in HR and AI platforms used by UK small businesses. CVE-2026-108707 (CVSS...
-
AI Vulnerabilities and IoT Threats Exposed
AI Vulnerabilities and IoT Threats Exposed In today’s episode of The Daily CVE Update, Corrine Jefferson delves into pressing cybersecurity threats affecting UK small businesses. We explore the MCP protocol vulnerability in AI systems, highlighting its appeal to malicious actors as noted by Ars...
-
Critical CVE Briefing: Citrix NetScaler & Ahsay CBS Threats
Critical CVE Briefing: Citrix NetScaler & Ahsay CBS Threats In today’s episode of The Daily CVE Update, Corrine Jefferson dives into two critical vulnerabilities affecting small businesses in the UK. Focusing on the Citrix NetScaler Denial of Service threat (CVE-2026-88779) and the Ahsay CBS…
more -
Safeguard Your Business from Critical Cyber Threats
Safeguard Your Business from Critical Cyber Threats In this episode of The Daily CVE Update, Corrine Jefferson guides UK small businesses through the latest cybersecurity threats that could significantly impact operations. We explore vulnerabilities like the Fortinet FortiMail flaw...
-
Understanding Cisco and Zimbra Vulnerabilities
Understanding Cisco and Zimbra Vulnerabilities In this episode of The Daily CVE Update, Corrine Jefferson discusses critical vulnerabilities affecting UK’s small businesses. We explore the serious implications of the Cisco Catalyst SD-WAN flaw, identified as CVE-2026-76504. This vulnerability...
-
Navigating Today's Critical CVE Threats
Navigating Today’s Critical CVE Threats In this episode of The Daily CVE Update, Corrine Jefferson explores critical vulnerabilities affecting key technology platforms for small businesses in the UK. The episode dives into a zero-day flaw in Apple’s CoreGraphics that risks data exposure on iOS,...
-
Netcore Vulnerabilities: A Wake-Up Call for UK Small Businesses
Netcore Vulnerabilities: A Wake-Up Call for UK Small Businesses In today’s episode of The Daily CVE Update, host Corrine Jefferson uncovers critical vulnerabilities in Netcore devices that pose significant threats to UK small businesses. With vulnerabilities such as CVE-2026-101000,...
-
Urgent Citrix Vulnerabilities: Immediate Actions Required
Urgent Citrix Vulnerabilities: Immediate Actions Required Join Corrine Jefferson on The Daily CVE Update as she unpacks the latest Citrix zero-day vulnerabilities threatening UK small businesses. Discover the critical nature of these security flaws affecting Citrix NetScaler ADC and NetScaler...
-
Critical CVEs: WSO2, Adobe, and HFS2 Under Siege
Critical CVEs: WSO2, Adobe, and HFS2 Under Siege In today’s episode of The Daily CVE Update, hosted by Corrine, we delve into critical vulnerabilities affecting small businesses in the UK. The spotlight is on serious security flaws in WSO2, Adobe’s Commerce and Magento, and HFS2. These...
-
Check Point and WordPress Zero-Days Under Active Exploitation
Check Point and WordPress Zero-Days Under Active Exploitation On 22 September 2026, CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalogue, confirming active exploitation in the wild. Two affect Check Point firewall management infrastructure (CVE-2026-93616 and...
-
Urgent Cybersecurity Alerts for UK Businesses
Urgent Cybersecurity Alerts for UK Businesses In today’s episode of The Daily CVE Update, hosted by Corrine, we delve into two critical cybersecurity vulnerabilities that demand immediate attention from UK small businesses. The first, CVE-2026-7273, affects Zyxel GS1900 switches and poses a...
-
Five Perfect-Score Router Flaws and the Offboarding Risk You're Ignoring
Five Perfect-Score Router Flaws and the Offboarding Risk You’re Ignoring Five CVSS 10.0 vulnerabilities have been published against networking equipment commonly found in UK small business offices, with public exploits requiring no authentication. Corrine examines the command injection and buffer...
-
Two CVSS 10.0 Vulnerabilities Demand Immediate Action
Two CVSS 10.0 Vulnerabilities Demand Immediate Action Two maximum-severity vulnerabilities have emerged within hours of each other, both scoring CVSS 10.0. CVE-2026-76460, an authentication bypass flaw in Cisco Identity Services Engine, is confirmed by CISA as actively exploited in the wild. The...
-
Acronis Backup, Cisco ISE, and Pixel Flaws Under Active Exploit
Acronis Backup, Cisco ISE, and Pixel Flaws Under Active Exploit Three vulnerabilities have landed on CISA’s Known Exploited Vulnerabilities catalogue overnight, and two of them sit in systems most small businesses never think about but rely on entirely. CVE-2026-87886 affects Acronis Backup...
-
The Patch Gap: WooCommerce, Lateral Movement, and Email Gateway Exploits
The Patch Gap: WooCommerce, Lateral Movement, and Email Gateway Exploits Three active exploitation campaigns landed on 16 September 2026, and every single one targeted vulnerabilities with available patches. Corrine walks through the WooCommerce Wholesale Lead Capture plugin flaw (CVE-2026-27540)...
-
Cisco Email Gateway Exploited, D-Link Routers at CVSS 9.9
Cisco Email Gateway Exploited, D-Link Routers at CVSS 9.9 On 14 September 2026, CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities catalogue, confirming active exploitation of a critical SQL injection flaw in Cisco Secure Email Gateway. The vulnerability allows unauthenticated…
more -
Router and Remote Access Vulnerabilities: Immediate Actions for UK SMBs
Router and Remote Access Vulnerabilities: Immediate Actions for UK SMBs This episode examines ten newly disclosed and actively exploited vulnerabilities affecting router and remote access infrastructure commonly deployed in UK small business networks. Host Corrine Jefferson walks through six CVEs...
-
AI-Assisted Exploitation and Active MikroTik Threats
AI-Assisted Exploitation and Active MikroTik Threats This episode examines two critical threats affecting UK small businesses: a Russian-speaking actor’s deployment of AI agents that compromised 440 PaperCut print management servers across 48 countries in 48 hours, and CISA’s addition of two...
-
Urgent CVE Alerts: Citrix and Chrome Vulnerabilities
Urgent CVE Alerts: Citrix and Chrome Vulnerabilities In today’s episode of The Daily CVE Update, Corrine delves into two critical cybersecurity vulnerabilities impacting small businesses. With a focus on the recent authentication bypass flaw in Citrix NetScaler (CVE-2026-19490) and a critical...
-
Urgent Security Flaws in Adobe and Microsoft Products
Urgent Security Flaws in Adobe and Microsoft Products In this episode of The Daily CVE Update, host Corrine highlights critical vulnerabilities in Adobe Commerce, Magento, and Microsoft Windows. Small businesses are particularly at risk from CVE-2026-75650, an exploit in Adobe’s systems that…
more -
Critical Vulnerabilities: Protect Your Business Now
Critical Vulnerabilities: Protect Your Business Now In this episode of The Daily CVE Update, Corrine Jefferson delivers crucial insights on two significant vulnerabilities threatening UK small businesses: CVE-2026-86296 and CVE-2026-75650. Discover the details of these high-severity risks in the...
-
Guarding Against Tenda Router and WordPress Risks
Guarding Against Tenda Router and WordPress Risks In today’s episode of The Daily CVE Update, Corrine Jefferson explores critical vulnerabilities affecting small businesses in the UK. The focus is on two significant threats: Tenda router vulnerabilities (CVE-2026-86152 and CVE-2026-86167) and...
-
Chrome Zero-Day and WordPress Mass Attack: Patch Today
Chrome Zero-Day and WordPress Mass Attack: Patch Today An actively exploited Chrome zero-day and a mass WordPress attack campaign are targeting UK businesses right now. CISA has confirmed active exploitation of CVE-2026-85046, a type confusion vulnerability in Chrome’s V8 JavaScript engine that...
-
Two CVSS 10.0 Flaws in Microsoft Cloud and Active Elementor Pro Exploit
Two CVSS 10.0 Flaws in Microsoft Cloud and Active Elementor Pro Exploit On 3 September 2026, the National Vulnerability Database published two critical vulnerabilities in Microsoft’s cloud infrastructure, each scoring CVSS 10.0. CVE-2026-70352 affects Azure AI Language and allows unauthenticated...
-
Sangoma Switchvox and SonicWall SMA1000: CISA Confirms Active Exploits
Sangoma Switchvox and SonicWall SMA1000: CISA Confirms Active Exploits Two critical vulnerabilities affecting business infrastructure have been added to CISA’s Known Exploited Vulnerabilities catalogue, with confirmed active exploitation in the wild. CVE-2026-9586 in Sangoma Switchvox allows...
-
Three Critical Password Reset Flaws Expose 22,000 Exchange Servers
Three Critical Password Reset Flaws Expose 22,000 Exchange Servers Three critical vulnerabilities disclosed this week share a common weakness: password reset logic that fails to validate tokens properly. CVE-2026-18550 in the Nokri Job Board WordPress theme allows unauthenticated attackers to...
-
PaperCut Under Active Attack: Two CVEs, One Failed Patch
PaperCut Under Active Attack: Two CVEs, One Failed Patch CISA confirmed on 31 August that two vulnerabilities in PaperCut NG and MF print management software are being actively exploited in the wild. CVE-2026-81578 allows unauthenticated remote attackers to bypass authentication and access admin...
-
Critical Router and WordPress Vulnerabilities Demand Immediate Action
Critical Router and WordPress Vulnerabilities Demand Immediate Action This episode examines two urgent threat areas affecting UK small businesses: three critical router vulnerabilities with maximum severity scores and publicly available exploit code, and a cluster of WordPress plugin and theme...
-
Authentication Bypass and Linux Kernel Flaws Under Active Exploitation
Authentication Bypass and Linux Kernel Flaws Under Active Exploitation Three critical vulnerabilities have been confirmed as actively exploited in the wild, triggering urgent additions to CISA’s Known Exploited Vulnerabilities catalogue. CVE-2023-49105, an authentication bypass in ownCloud…
more -
SQL Server, WordPress Avada, and Gitea Under Active Exploitation
SQL Server, WordPress Avada, and Gitea Under Active Exploitation Three critical vulnerabilities are being actively exploited in the wild, all with patches available. Microsoft SQL Server’s CVE-2019-1068, a remote code execution flaw first patched in 2019, remains weaponised against unpatched...
-
Adobe Campaign, WordPress Login Bypass, and Gitea Code Injection
Adobe Campaign, WordPress Login Bypass, and Gitea Code Injection Three CVSS 10.0 vulnerabilities landed in Adobe Campaign Classic within 24 hours, all enabling unauthenticated remote code execution. Attackers are actively exploiting an authentication bypass in the WordPress miniOrange SAML plugin...
-
Critical Flaws in HTML Sanitiser and Spreadsheet Library
Critical Flaws in HTML Sanitiser and Spreadsheet Library This episode examines five critical vulnerabilities published within 24 hours, all scoring CVSS 9.4 or above. Four CVEs affect justhtml, a Python HTML sanitisation library, exposing bypass techniques including encoded malicious URLs,...
-
Active Exploitation of TrueConf, Microsoft CVSS 10.0 Flaws, and Elementor Pro
Active Exploitation of TrueConf, Microsoft CVSS 10.0 Flaws, and Elementor Pro On 20 August 2026, CISA confirmed active exploitation of two TrueConf Server vulnerabilities allowing unauthenticated remote code execution. The same day, Microsoft disclosed four separate CVSS 10.0 vulnerabilities...
-
Active Exploitation of MSP Tools, CCTV Systems and Windows VPNs
Active Exploitation of MSP Tools, CCTV Systems and Windows VPNs This episode examines three concurrent exploitation campaigns targeting UK small business infrastructure in August 2026. First, CVE-2026-18577 in N-able N-central RMM software, which grants unauthenticated administrative access to…
more -
SharePoint Zero-Auth Bypass, macOS Screen Sharing Flaw, Copilot Data Leak
SharePoint Zero-Auth Bypass, macOS Screen Sharing Flaw, Copilot Data Leak Three critical vulnerabilities confirmed as actively exploited demand immediate attention from UK small businesses. CVE-2026-55040 allows unauthenticated attackers to bypass SharePoint authentication entirely, no…
more -
WordPress Plugin and Router Botnet Threats Demand Immediate Patching
WordPress Plugin and Router Botnet Threats Demand Immediate Patching This episode examines two active cybersecurity threats affecting UK small businesses: CVE-2026-15748, a critical unauthenticated remote code execution vulnerability in the Forminator Forms WordPress plugin with over 600,000...
-
Critical Router, WordPress, and VMware Exploits Now Public
Critical Router, WordPress, and VMware Exploits Now Public Three critical security vulnerabilities with publicly available exploit code were disclosed on 16 August 2026, requiring immediate action from UK small businesses. This episode covers CVE-2026-19959 and CVE-2026-19961 affecting Edimax...
-
WordPress Backdoors and SharePoint Exploits: Two Preventable Threats
WordPress Backdoors and SharePoint Exploits: Two Preventable Threats Two critical vulnerabilities demand immediate attention from UK small businesses. WordPress plugins Fluent Forms Pro and Ninja Tables Pro were distributed with backdoored updates that bypass authentication, establish hidden API...
-
Critical Vulnerabilities Threatening UK Businesses
Critical Vulnerabilities Threatening UK Businesses In today’s episode of The Daily CVE Update, Corrine explores critical vulnerabilities affecting UK small businesses. With cybercriminals casting wider nets, businesses must remain vigilant. We delve into Spikster’s unprotected API routes, scoring...
-
Addressing IBM WebSphere Vulnerabilities
Addressing IBM WebSphere Vulnerabilities In this episode of The Daily CVE Update, Corrine Jefferson discusses critical vulnerabilities in IBM WebSphere, which pose a severe risk to small UK businesses. With vulnerabilities like CVE-2026-14512 allowing remote attackers to bypass authentication and...
-
Critical Vulnerabilities: FortiOS and VeloCloud Threats
Critical Vulnerabilities: FortiOS and VeloCloud Threats In this episode of The Daily CVE Update, Corrine discusses crucial vulnerabilities affecting UK small businesses, focusing on FortiOS and VeloCloud Orchestrator. FortiOS’s CVE-2025-68686 allows data breaches by bypassing earlier patches…
more
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
The Daily CVE UpdateFrom The Small Business Cyber Security Guy PodcastNew software vulnerabilities are published every single day. Most of them get buried in technical databases that only security professionals ever read. By the time the average small business finds out about a serious flaw, it has already been used against businesses just like theirs.This daily 10-minute briefing changes that.Every weekday morning, we go through the latest vulnerability disclosures from the global CVE database and tell you, in plain language, which ones actually matter to your business. No jargon. No alphabet soup. Just a clear explanation of what is affected, how serious it is, and what you need to ask your IT support to do about it.Each episode includes a dedicated KEV Alert section covering any vulnerabilities that are confirmed as actively exploited in the wild right now. Not theoretical. Not “could be used one day.” These are the ones where attacks are already happening and your window to
HOSTED BY
The Small Business Cyber Security Guy
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does The Daily CVE Update have?
The Daily CVE Update currently has 73 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is The Daily CVE Update about?
The Daily CVE UpdateFrom The Small Business Cyber Security Guy PodcastNew software vulnerabilities are published every single day. Most of them get buried in technical databases that only security professionals ever read. By the time the average small business finds out about a serious flaw, it has...
How often does The Daily CVE Update release new episodes?
The Daily CVE Update has 73 episodes. Check the episode list to see recent publication dates and frequency.
Where can I listen to The Daily CVE Update?
You can listen to The Daily CVE Update on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts The Daily CVE Update?
The Daily CVE Update is created and hosted by The Small Business Cyber Security Guy.
URL copied to clipboard!