GitLab CVE-2026-97229 (CVSS 10.0) can allow unauthenticated code execution on self-managed CE/EE. FAQ, SaaS vs self-managed grid and versions 19.2.8 / 19.3.5 / 19.4.2.
Qilin and Settra exploit the GlobalProtect vulnerability CVE-2026-0257 to get in through the VPN without a password. Legitimate vs rogue session table, 5 urgent steps and behavioural detection.
An AI agent for meeting notes turns messy notes into a summary, decisions, tasks and follow-up emails ready for approval. Annotated mockup, prepare/approve table and 3 safety rules.
The TeamCity vulnerability CVE-2026-63077 (CVSS 9.8) allows code execution without a password and is now used by ransomware. The 4-step attack chain, Cloud vs On-Premises and a checklist.
A cyberattack on Canadian Mennonite University exposed T4 slips going back to 2015, with SINs. Timeline, a before/after for your payroll data, and how long to keep records.
Accounts not ready, unanswered questions, forgotten training: an AI agent for employee onboarding prepares, guides and follows up, with human approval. The D-5 to D-30 journey and FAQ.
CISA just added six actively exploited flaws to its catalog, three from 2015 and 2016 (ProFTPD, BIND, Struts). The age/risk/fix table and a checklist for your forgotten systems.
Ransomware hit Japan’s IDCF Cloud: 495 companies and local governments affected, and the provider says only customers’ own backups will allow a restore. What’s confirmed, the shared responsibility split and a 5-step restore drill.
Reminders, forgotten hours, client codes, draft invoices: what an AI agent for timesheets changes for a service SMB, common fears, and a 4-week plan to start safely.
SonicWall vulnerability CVE-2026-102255, rated 10/10, is already being targeted on SMA1000 remote access appliances, and September’s patch doesn’t protect you. A 3-phase response card and the 4 log traces to hunt for.
