Active Exploitation of TrueConf, Microsoft CVSS 10.0 Flaws, and Elementor Pro
Active Exploitation of TrueConf, Microsoft CVSS 10.0 Flaws, and Elementor Pro
On 20 August 2026, CISA confirmed active exploitation of two TrueConf Server vulnerabilities allowing unauthenticated remote code execution. The same day, Microsoft disclosed four separate CVSS 10.0 vulnerabilities affecting Exchange Online, Entra ID, Azure Arc, and Azure Managed Instance for Apache Cassandra. Meanwhile, six million WordPress sites face exposure through a critical unauthenticated file upload flaw in Elementor Pro. For UK small businesses, these disclosures highlight a consistent pattern: the attack…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.