MSP Backup Compromise, Cisco Email Flaw, and the 1,414-Patch Month
MSP Backup Compromise, Cisco Email Flaw, and the 1,414-Patch Month
On 14 October 2026, CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalogue, three of which carry direct consequences for UK small businesses relying on managed service providers. The lead story concerns Ahsay Cloud Backup Server, where two chainable CVEs allowed attackers to bypass authentication and execute arbitrary commands on MSP backup infrastructure. Active exploitation began by 4 October, giving attackers a ten-day window before public disclosure. Cisco Secure Email Gateway also suffered a…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.