https://www.trustdigital.net/live Actively exploited vulnerabilities, vendor advisories, Microsoft changes, and end-of-support deadlines — filtered to what matters for businesses on the modern Microsoft stack, by the TrustDigital team. en-us Sat, 01 Aug 2026 08:36:32 GMT https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Authentication%20Bypass%20Vulnerability%26vs_k=1 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Authentication%20Bypass%20Vulnerability%26vs_k=1 Fri, 31 Jul 2026 12:00:00 GMT A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due t — Who should care: IT managers and business owners should pay attention to this vulnerability as it could allow unauthorized access to critical systems, potentially compromising sensitive company data. — What to do: Ask us whether this applies to your environment. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Static%20Credential%20Vulnerability%26vs_k=1 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Static%20Credential%20Vulnerability%26vs_k=1 Fri, 31 Jul 2026 12:00:00 GMT A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presenc — Who should care: Business owners using Cisco firewall products should be aware of this vulnerability, as it could expose sensitive company data to unauthorized access. — What to do: Ask us whether this applies to your environment. https://www.cisa.gov/resources-tools/resources/open-source-software-security-principles-and-practices https://www.cisa.gov/resources-tools/resources/open-source-software-security-principles-and-practices Thu, 30 Jul 2026 12:00:00 GMT Open source software (OSS) is embedded in nearly every modern system, from business applications to critical infrastructure. Our new Open Source Software: Security Principles and Practices guidance helps agencies securely use, evaluate, and publish open source software. It covers OSS risk management — Who should care: Business owners and office managers should pay attention to this guidance as it helps ensure the safe use of open source software, which is essential for protecting your company's systems and data. https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs Thu, 30 Jul 2026 12:00:00 GMT CISA is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems (WWS) Sector. CISA urges critical infrastructure owners, operators, and integrators to remove publicly exposed PLCs and other operational tech — Who should care: Water and wastewater system managers should take note, as protecting operational technology from cyber threats is crucial to ensure safe and reliable services for communities. https://nvd.nist.gov/vuln/detail/CVE-2026-20316 CVE-2026-20316 Wed, 29 Jul 2026 12:00:00 GMT Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impa — Who should care: Small and mid-size business owners should be aware of this vulnerability, as it could allow unauthorized access to sensitive data, potentially compromising their operations and customer trust. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://www.cisa.gov/resources-tools/resources/2026-minimum-elements-software-bill-materials-sbom https://www.cisa.gov/resources-tools/resources/2026-minimum-elements-software-bill-materials-sbom Wed, 29 Jul 2026 12:00:00 GMT CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released joint guidance, 2026 Minimum Elements for a Software Bill of Materials (SBOM) , that updates and replaces the minimum elements for an SBOM published by the National Telecommunications and Inf — Who should care: Business owners and managers should pay attention to this advisory as it outlines essential software documentation requirements that can enhance security and compliance for their company's software assets. https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog Wed, 29 Jul 2026 12:00:00 GMT CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability This type of vulnerability is a frequent attack vector for malicious c — Who should care: Business owners and office managers should pay attention to this vulnerability as it highlights a security risk that could expose their systems to attacks if not addressed promptly. https://www.cisa.gov/resources-tools/resources/ci-fortify-advice-isolating-vital-systems https://www.cisa.gov/resources-tools/resources/ci-fortify-advice-isolating-vital-systems Tue, 28 Jul 2026 12:00:00 GMT CI Fortify – Advice for isolating vital systems CI Fortify – Advice for isolating vital systems (PDF) CISA and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration with the Federal Bureau of Investigation and international partners, released joint guid — Who should care: Business owners should pay attention to this guidance on isolating vital systems to protect their critical operations from potential cyber threats. https://nvd.nist.gov/vuln/detail/CVE-2025-68686 CVE-2025-68686 Mon, 27 Jul 2026 12:00:00 GMT Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacke — Who should care: Small and mid-size business owners should pay attention because this vulnerability could let unauthorized users access sensitive information, potentially compromising your company's data security. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog Mon, 27 Jul 2026 12:00:00 GMT CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Com — Who should care: Business owners should pay attention because these vulnerabilities could put sensitive company information at risk, highlighting the importance of keeping software updated and secure. https://nvd.nist.gov/vuln/detail/CVE-2026-50522 CVE-2026-50522 Wed, 22 Jul 2026 12:00:00 GMT Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. — Who should care: Business owners using Microsoft SharePoint should be aware of a vulnerability that could let attackers run harmful code remotely, potentially compromising sensitive company data. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-check-point-smartconsole-authentication-bypass-cve-2026-16232/ https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-check-point-smartconsole-authentication-bypass-cve-2026-16232/ Wed, 22 Jul 2026 12:00:00 GMT As part of Check Point’s Frontier AI Readiness Program, we are releasing a jumbo hotfix with security and hardening fixes for our firewall and management products. This update includes a number of security hardening improvements and fixes, the most significant of which are outlined below. During a r — Who should care: Business owners and office managers should pay attention to this update as it includes important security fixes that help protect your company's network from potential threats. — What to do: Ask us whether this applies to your environment. https://nvd.nist.gov/vuln/detail/CVE-2026-60137 CVE-2026-60137 Tue, 21 Jul 2026 12:00:00 GMT WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations. — Who should care: Website managers using WordPress should pay attention, as this vulnerability could allow attackers to take control of their site without needing a password. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-63030 CVE-2026-63030 Tue, 21 Jul 2026 12:00:00 GMT WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137. — Who should care: Small and mid-sized business owners using WordPress should be aware of this vulnerability, as it could allow attackers to compromise their websites and access sensitive data. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-58644 CVE-2026-58644 Thu, 16 Jul 2026 12:00:00 GMT Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. — Who should care: Business owners using Microsoft SharePoint should be aware of a vulnerability that could allow unauthorized access to their systems, potentially compromising sensitive information. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-25089 CVE-2026-25089 Thu, 16 Jul 2026 12:00:00 GMT Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests. — Who should care: Business owners using Fortinet products should be aware of this vulnerability, as it could allow attackers to gain unauthorized access to their systems. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-39808 CVE-2026-39808 Thu, 16 Jul 2026 12:00:00 GMT Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests. — Who should care: Small to mid-size business owners should pay attention to this vulnerability as it could allow attackers to gain unauthorized access to their systems, risking sensitive data. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-56155 CVE-2026-56155 Tue, 14 Jul 2026 12:00:00 GMT Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally. — Who should care: Business owners should be aware of this vulnerability as it could allow attackers to gain unauthorized access to sensitive company data, potentially compromising security and trust. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-56164 CVE-2026-56164 Tue, 14 Jul 2026 12:00:00 GMT Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. — Who should care: Small and mid-size business owners should be aware that a vulnerability in Microsoft SharePoint could allow unauthorized access to sensitive data, potentially compromising their operations. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-15409 CVE-2026-15409 Tue, 14 Jul 2026 12:00:00 GMT SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. — Who should care: IT managers and business owners should monitor this vulnerability, as it could expose sensitive data or systems to unauthorized access if not addressed promptly. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://nvd.nist.gov/vuln/detail/CVE-2026-15410 CVE-2026-15410 Tue, 14 Jul 2026 12:00:00 GMT SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. — Who should care: Business owners using SonicWall SMA1000 appliances should be aware of this vulnerability, as it could allow unauthorized access to their systems and compromise sensitive data. — What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul msrc-2026-Jul Tue, 14 Jul 2026 12:00:00 GMT Microsoft’s monthly security release. If we manage your patching, these are already scheduled for your environment. — Who should care: Business owners and office managers should note that Microsoft’s security updates help protect your systems from vulnerabilities, ensuring your operations run smoothly and securely. https://fortiguard.fortinet.com/psirt/FG-IR-26-154 https://fortiguard.fortinet.com/psirt/FG-IR-26-154 Tue, 14 Jul 2026 12:00:00 GMT CVSSv3 Score: 4.1 A buffer over-read vulnerability [CWE-126] in FortiOS, FortiProxy, and FortiSASE may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request. Revised on 2026-07-14 00:00:00 — Who should care: IT managers should pay attention because this vulnerability could potentially expose sensitive information, impacting the security of your network devices. — What to do: Ask us whether this applies to your environment. https://fortiguard.fortinet.com/psirt/FG-IR-26-149 https://fortiguard.fortinet.com/psirt/FG-IR-26-149 Tue, 14 Jul 2026 12:00:00 GMT CVSSv3 Score: 5.3 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability [CWE-80] in FortiSIEM may allow a privileged administrator to execute unauthorized commands via crafted requests. Revised on 2026-07-14 00:00:00 — Who should care: Business owners using Fortinet products should review this advisory to ensure their systems are secure and prevent unauthorized access to sensitive information. — What to do: Ask us whether this applies to your environment. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement pinned-entra-sms-voice-retirement Mon, 13 Jul 2026 12:00:00 GMT Two-phase change for every Entra ID tenant: on September 1, 2026, users still using SMS or voice codes get automatically enabled for passkeys and prompted to register one. On February 1, 2027, Microsoft-provided SMS and voice authentication retires entirely — tenants that haven't moved to phishing-resistant methods (passkeys, Windows Hello, FIDO2 keys, Authenticator) risk sign-in disruptions. — Who should care: Business owners should prepare for the shift to passkeys by 2026 to ensure smooth access for employees, as reliance on SMS and voice authentication will end in early 2027. — What to do: Ask us to inventory who in your tenant still signs in with SMS or voice codes and plan the migration before September. https://techcommunity.microsoft.com/t5/microsoft-365-blog/update-health-in-cloud-update-is-now-generally-available/ba-p/4523063 https://techcommunity.microsoft.com/t5/microsoft-365-blog/update-health-in-cloud-update-is-now-generally-available/ba-p/4523063 Wed, 27 May 2026 12:00:00 GMT Keeping Microsoft 365 Apps up to date is essential for security, reliability, and access to new features. When an update does not complete successfully, however, identifying the issue and understanding its impact across devices can take time. Today, we’re announcing general availability of update he — Who should care: Business owners and office managers should pay attention to this update because keeping Microsoft 365 Apps current helps protect your company and ensures your team has the latest features for productivity. — What to do: Ask us what this changes for your tenant and when to act. https://techcommunity.microsoft.com/t5/microsoft-365-blog/only-6-months-until-office-ltsc-2021-end-of-support-are-you/ba-p/4509673 https://techcommunity.microsoft.com/t5/microsoft-365-blog/only-6-months-until-office-ltsc-2021-end-of-support-are-you/ba-p/4509673 Mon, 13 Apr 2026 12:00:00 GMT Continuing to use software after end of support can leave your devices vulnerable to potential security threats, productivity losses, and compliance issues. That’s why it’s important to know that in just six months, on October 13, 2026 , support will end for Office LTSC 2021 suites and standalone ap — Who should care: Business owners and office managers should prepare for the end of support for Office LTSC 2021 in six months to avoid security risks and ensure ongoing productivity. — What to do: Ask us what this changes for your tenant and when to act. https://endoflife.date/mssqlserver eol-mssqlserver-13.0-sp3-acp Tue, 14 Jul 2026 12:00:00 GMT Security updates for SQL Server 2016 SP3 Azure Connect Pack stopped on 7/14/2026. Systems still running it are accumulating unpatched risk. — Who should care: Business owners using SQL Server 2016 should consider upgrading soon, as unsupported software can expose your company to security risks without updates. — What to do: Talk to us about upgrade planning if this is in your environment. https://endoflife.date/mssqlserver eol-mssqlserver-13.0-sp3 Tue, 14 Jul 2026 12:00:00 GMT Security updates for SQL Server 2016 SP3 stopped on 7/14/2026. Systems still running it are accumulating unpatched risk. — Who should care: Business owners using SQL Server 2016 should be aware that without support, their systems are vulnerable to security risks that could impact operations and data safety. — What to do: Talk to us about upgrade planning if this is in your environment. https://endoflife.date/windows eol-windows-11-24h2-w Tue, 13 Oct 2026 12:00:00 GMT After 10/13/2026, Windows 11 24H2 (W) stops receiving security updates. Plan the upgrade before the deadline, not after. — Who should care: Business owners and office managers should plan to upgrade Windows 11 before October 2026 to ensure continued security updates and protect their company from vulnerabilities. — What to do: Talk to us about upgrade planning if this is in your environment. https://endoflife.date/windows eol-windows-10-1607-e-lts Tue, 13 Oct 2026 12:00:00 GMT After 10/13/2026, Windows 10 1607 (E) stops receiving security updates. Plan the upgrade before the deadline, not after. — Who should care: Business owners and office managers should plan to upgrade Windows 10 1607 before October 2026 to ensure continued security and protection against vulnerabilities. — What to do: Talk to us about upgrade planning if this is in your environment. https://endoflife.date/office eol-office-2021 Tue, 13 Oct 2026 12:00:00 GMT After 10/13/2026, Microsoft Office 2021 stops receiving security updates. Plan the upgrade before the deadline, not after. — Who should care: Business owners and office managers should plan to upgrade Microsoft Office 2021 before October 2026 to ensure ongoing security and protection against vulnerabilities. — What to do: Talk to us about upgrade planning if this is in your environment.