CloudKey Blog

Field notes from the security team.

Ranked CVE roundups, zero-day analysis, product walkthroughs and honest comparisons. New posts Mon, Wed and Fri.

CloudKey confirmed-exploited flaws banner for a weekly CVE digest covering Adobe ColdFusion, Cisco IOS, Langflow and four Joomla extensions on CISA KEV

CVE Jul 13, 2026 8 min read

Adobe ColdFusion leads seven CVEs now confirmed exploited

Seven flaws are now confirmed exploited: an Adobe ColdFusion path traversal and a wave of Joomla file-upload RCEs, all on CISA KEV this week. Patch by exposure first.

CloudKey Security Research Read →

CloudKey Confirmed-exploited flaws banner for a weekly CVE digest covering Microsoft SharePoint Server and SimpleHelp, both listed on the CISA KEV catalog

CVE Jul 6, 2026 5 min read

SharePoint and SimpleHelp: two CVEs now confirmed exploited

Two flaws are now confirmed exploited: a Microsoft SharePoint code-execution bug and a SimpleHelp auth bypass, both on CISA KEV this week. Patch them before your CVSS queue.

CloudKey Security Research

CloudKey abstract illustration of a login card pulled out of a stream of scrolling records, representing one company credential found in a breach dataset

Product Jul 1, 2026 9 min read

How to check if your company credentials leaked

A practical guide to check if your company credentials leaked: where stolen logins come from, how to search breach and infostealer data safely, and what to do about a hit.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jul 1, 2026 3 min read

Patch Now: SharePoint Server Is Exploited, Federal Deadline July 4

CVE-2026-45659 is an actively exploited deserialization flaw in Microsoft SharePoint Server. CISA added it to KEV on July 1 with a federal deadline of July 4, 2026.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 30, 2026 3 min read

Attackers Are Exploiting SimpleHelp: CVSS 10 Auth Bypass in the Wild

CVE-2026-48558, a CVSS 10 authentication bypass in SimpleHelp, is actively exploited and added to CISA KEV with a July 2 federal patch deadline.

CloudKey Security Research

CloudKey weekly CVE digest banner: four confirmed-exploited flaws now on CISA KEV, Cisco Unified CM, Ubiquiti UniFi OS, PTC Windchill and Lantronix EDS5000

CVE Jun 29, 2026 7 min read

CVE digest: Cisco, Ubiquiti, PTC and Lantronix exploited in the wild

Four flaws now confirmed exploited, added to CISA's KEV the week of June 29, 2026: Cisco Unified CM, Ubiquiti UniFi OS, PTC Windchill and Lantronix. What to patch first.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 26, 2026 3 min read

Cisco Unified CM SSRF Exploited, Patch by June 28

CVE-2026-20230 is a server-side request forgery flaw in Cisco Unified CM and Unified CM SME added to CISA KEV on June 25. Federal deadline is June 28.

CloudKey Security Research

CloudKey abstract illustration of a glowing padlock and key on a circuit board, a penetration test used as audit evidence for SOC 2 security controls

Product Jun 24, 2026 8 min read

Is penetration testing required for SOC 2?

Is penetration testing required for SOC 2? Not by name in the Trust Services Criteria, but auditors expect one to satisfy CC7.1. What to test, and how often.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 23, 2026 5 min read

Attackers Can Reach Root on UniFi OS and Lantronix Edge Servers

Ubiquiti UniFi OS and Lantronix EDS5000 reached CISA KEV on June 23 with unauthenticated root flaws, and Copy Fail (CVE-2026-31431) now hits B&R OT gear. Patch fast.

CloudKey Security Research

CloudKey weekly CVE digest banner: three confirmed-exploited flaws now on CISA KEV, Splunk Enterprise, the Joomla JCE editor and a LiteSpeed cPanel plugin

CVE Jun 22, 2026 6 min read

CVE digest: Splunk, Joomla JCE and LiteSpeed exploited in the wild

Three flaws now confirmed exploited, added to CISA's KEV the week of June 22, 2026: Splunk Enterprise, the Joomla JCE editor and a LiteSpeed cPanel plugin. What to patch first.

CloudKey Security Research

CloudKey security alert: a glowing firewall icon cracked open over a dark world map, marking leaked VPN credentials across thousands of devices

News Jun 19, 2026 4 min read

FortiBleed: 73,000 Fortinet VPN Credentials Exposed, What To Do

A leaked dataset exposed plaintext VPN credentials for 73,932 FortiGate firewalls in 194 countries. What FortiBleed is, whether your gateway is affected, and what to do now.

CloudKey Security Research

$CloudKey rapid-response alert: a fractured glowing padlock over a dark network mesh, marking an actively exploited vulnerability$

Zero-day Jun 18, 2026 4 min read

Splunk Enterprise CVE-2026-20253 Exploited: Patch Before June 21

CISA added Splunk Enterprise CVE-2026-20253 to KEV on June 18, 2026. Unauthenticated file write via PostgreSQL sidecar, federal due date June 21. Who is affected and what to do.

CloudKey Security Research

Subscribe via RSS: /rss.xml