Every week brings a handful of security flaws that matter well beyond the companies that make the software: a firewall that can be taken over from the internet, a browser bug already being used against people, a WordPress plugin on hundreds of thousands of sites. They are usually announced in dense advisories written for security teams.
Vulnerability watch picks out the big ones and says, in plain words, what is wrong, who is affected and what to do. Each entry links to the vendor's own advisory first, then to CISA's list of vulnerabilities known to be exploited, the US national vulnerability database and the press.
What makes the list
A flaw is included if it is being exploited, if it is critical in software that lots of businesses run, if it touches the kind of websites and systems we build and look after, or if it is big news. Everything else is left to the specialists.
It is updated every weekday morning. If you are a client and something on it worries you, get in touch and we will check your site.
All news