Shows / The Daily CVE Update
The Daily CVE Update
The Daily CVE Update From The Small Business Cyber Security Guy Podcast New software vulnerabilities are published every single day. Most of them get buried in technical databases that only security professionals ever read. By the time the average small business finds out about a serious flaw, it has already been used against businesses just like theirs. This daily 10-minute briefing changes that. Every weekday morning, we go through the latest vulnerability disclosures from the global CVE…
Episodes
- The Daily CVE Update
CVSS 10.0 Router Flaw and WordPress File Deletion Exploit
CVSS 10.0 Router Flaw and WordPress File Deletion Exploit Two maximum-severity vulnerabilities published on 2 November 2026 pose immediate threats to UK small…
- The Daily CVE Update
WAVLINK Cascade: 21 Critical Router Flaws and Active Ivanti Exploitation
WAVLINK Cascade: 21 Critical Router Flaws and Active Ivanti Exploitation On 1 and 2 November 2026, NIST published 21 critical vulnerabilities affecting WAVLINK…
- The Daily CVE Update
Adobe Commerce Under Active Attack, Microsoft Authenticator Token Theft
Adobe Commerce Under Active Attack, Microsoft Authenticator Token Theft CISA has confirmed active exploitation of a critical file upload vulnerability in Adobe…
- The Daily CVE Update
PHP Zero-Days and 953 Compromised Shops: CISA Confirms Active Exploitation
PHP Zero-Days and 953 Compromised Shops: CISA Confirms Active Exploitation On 26 October 2026, CISA added two PHP vulnerabilities to its Known Exploited…
- The Daily CVE Update
AI-Assisted Breaches and Critical YesWiki SQL Injection
AI-Assisted Breaches and Critical YesWiki SQL Injection This episode examines two critical security developments affecting UK small businesses. First…
- The Daily CVE Update
PHP2SHELL and Two Microsoft CVSS 10.0 Vulnerabilities
PHP2SHELL and Two Microsoft CVSS 10.0 Vulnerabilities On 22 October 2026, three critical security events converged: two maximum-severity PHP vulnerabilities…
- The Daily CVE Update
PHP2Shell: Critical Vulnerabilities Actively Exploited
PHP2Shell: Critical Vulnerabilities Actively Exploited Two critical PHP vulnerabilities, CVE-2026-1096118 and CVE-2026-1096119, both scored 9.8 out of 10, were…
- The Daily CVE Update
Plex Media Server Under Active Attack: Four Chained Vulnerabilities
Plex Media Server Under Active Attack: Four Chained Vulnerabilities On 20 October 2026, CISA added four Plex Media Server vulnerabilities to its Known…
- The Daily CVE Update
Rank Math PRO Supply Chain Attack and H3C Router Exploits
Rank Math PRO Supply Chain Attack and H3C Router Exploits On 20 October 2026, two critical security incidents demand immediate attention from UK small…
- The Daily CVE Update
Hardcoded Credentials and Drupal RCE: Two Critical Patches You Need Today
Hardcoded Credentials and Drupal RCE: Two Critical Patches You Need Today Two critical vulnerabilities disclosed in the last 48 hours demand immediate…
- The Daily CVE Update
Active Exploitation, Perfect Scores, and Hard-Coded Camera Backdoors
Active Exploitation, Perfect Scores, and Hard-Coded Camera Backdoors Three critical vulnerabilities demand immediate attention from UK small businesses this…
- The Daily CVE Update
MSP Backup Compromise, Cisco Email Flaw, and the 1,414-Patch Month
MSP Backup Compromise, Cisco Email Flaw, and the 1,414-Patch Month On 14 October 2026, CISA added four vulnerabilities to its Known Exploited Vulnerabilities…
- The Daily CVE Update
Ivanti VPN and Windows Shell Zero-Days Confirmed Exploited in the Wild
Ivanti VPN and Windows Shell Zero-Days Confirmed Exploited in the Wild On 14 October 2026, CISA confirmed active exploitation of two critical zero-day…
- The Daily CVE Update
Legacy Routers, WordPress Exploits, and the Compression of Patch Windows
Legacy Routers, WordPress Exploits, and the Compression of Patch Windows Three critical vulnerabilities disclosed this week share a dangerous common thread…
- The Daily CVE Update
HR Platform Bypasses Authentication, AI Tools Ship Default Admin Tokens
HR Platform Bypasses Authentication, AI Tools Ship Default Admin Tokens On 11 October 2026, three critical vulnerabilities were published to the National…
- The Daily CVE Update
AI Vulnerabilities and IoT Threats Exposed
AI Vulnerabilities and IoT Threats Exposed In today’s episode of The Daily CVE Update, Corrine Jefferson delves into pressing cybersecurity threats affecting…
- The Daily CVE Update
Critical CVE Briefing: Citrix NetScaler & Ahsay CBS Threats
Critical CVE Briefing: Citrix NetScaler & Ahsay CBS Threats In today’s episode of The Daily CVE Update, Corrine Jefferson dives into two critical…
- The Daily CVE Update
Safeguard Your Business from Critical Cyber Threats
Safeguard Your Business from Critical Cyber Threats In this episode of The Daily CVE Update, Corrine Jefferson guides UK small businesses through the latest…
- The Daily CVE Update
Understanding Cisco and Zimbra Vulnerabilities
Understanding Cisco and Zimbra Vulnerabilities In this episode of The Daily CVE Update, Corrine Jefferson discusses critical vulnerabilities affecting UK’s…
- The Daily CVE Update
Navigating Today's Critical CVE Threats
Navigating Today’s Critical CVE Threats In this episode of The Daily CVE Update, Corrine Jefferson explores critical vulnerabilities affecting key technology…
- The Daily CVE Update
Netcore Vulnerabilities: A Wake-Up Call for UK Small Businesses
Netcore Vulnerabilities: A Wake-Up Call for UK Small Businesses In today’s episode of The Daily CVE Update, host Corrine Jefferson uncovers critical…
- The Daily CVE Update
Urgent Citrix Vulnerabilities: Immediate Actions Required
Urgent Citrix Vulnerabilities: Immediate Actions Required Join Corrine Jefferson on The Daily CVE Update as she unpacks the latest Citrix zero-day…
- The Daily CVE Update
Critical CVEs: WSO2, Adobe, and HFS2 Under Siege
Critical CVEs: WSO2, Adobe, and HFS2 Under Siege In today’s episode of The Daily CVE Update, hosted by Corrine, we delve into critical vulnerabilities…
- The Daily CVE Update
Check Point and WordPress Zero-Days Under Active Exploitation
Check Point and WordPress Zero-Days Under Active Exploitation On 22 September 2026, CISA added three vulnerabilities to its Known Exploited Vulnerabilities…
- The Daily CVE Update
Urgent Cybersecurity Alerts for UK Businesses
Urgent Cybersecurity Alerts for UK Businesses In today’s episode of The Daily CVE Update, hosted by Corrine, we delve into two critical cybersecurity…
- The Daily CVE Update
Five Perfect-Score Router Flaws and the Offboarding Risk You're Ignoring
Five Perfect-Score Router Flaws and the Offboarding Risk You’re Ignoring Five CVSS 10.0 vulnerabilities have been published against networking equipment…
- The Daily CVE Update
Two CVSS 10.0 Vulnerabilities Demand Immediate Action
Two CVSS 10.0 Vulnerabilities Demand Immediate Action Two maximum-severity vulnerabilities have emerged within hours of each other, both scoring CVSS 10.0…
- The Daily CVE Update
Acronis Backup, Cisco ISE, and Pixel Flaws Under Active Exploit
Acronis Backup, Cisco ISE, and Pixel Flaws Under Active Exploit Three vulnerabilities have landed on CISA’s Known Exploited Vulnerabilities catalogue…
- The Daily CVE Update
The Patch Gap: WooCommerce, Lateral Movement, and Email Gateway Exploits
The Patch Gap: WooCommerce, Lateral Movement, and Email Gateway Exploits Three active exploitation campaigns landed on 16 September 2026, and every single one…
- The Daily CVE Update
Cisco Email Gateway Exploited, D-Link Routers at CVSS 9.9
Cisco Email Gateway Exploited, D-Link Routers at CVSS 9.9 On 14 September 2026, CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities catalogue…
- The Daily CVE Update
Router and Remote Access Vulnerabilities: Immediate Actions for UK SMBs
Router and Remote Access Vulnerabilities: Immediate Actions for UK SMBs This episode examines ten newly disclosed and actively exploited vulnerabilities…
- The Daily CVE Update
AI-Assisted Exploitation and Active MikroTik Threats
AI-Assisted Exploitation and Active MikroTik Threats This episode examines two critical threats affecting UK small businesses: a Russian-speaking actor’s…
- The Daily CVE Update
Urgent CVE Alerts: Citrix and Chrome Vulnerabilities
Urgent CVE Alerts: Citrix and Chrome Vulnerabilities In today’s episode of The Daily CVE Update, Corrine delves into two critical cybersecurity vulnerabilities…
- The Daily CVE Update
Urgent Security Flaws in Adobe and Microsoft Products
Urgent Security Flaws in Adobe and Microsoft Products In this episode of The Daily CVE Update, host Corrine highlights critical vulnerabilities in Adobe…
- The Daily CVE Update
Critical Vulnerabilities: Protect Your Business Now
Critical Vulnerabilities: Protect Your Business Now In this episode of The Daily CVE Update, Corrine Jefferson delivers crucial insights on two significant…
- The Daily CVE Update
Guarding Against Tenda Router and WordPress Risks
Guarding Against Tenda Router and WordPress Risks In today’s episode of The Daily CVE Update, Corrine Jefferson explores critical vulnerabilities affecting…
- The Daily CVE Update
Chrome Zero-Day and WordPress Mass Attack: Patch Today
Chrome Zero-Day and WordPress Mass Attack: Patch Today An actively exploited Chrome zero-day and a mass WordPress attack campaign are targeting UK businesses…
- The Daily CVE Update
Two CVSS 10.0 Flaws in Microsoft Cloud and Active Elementor Pro Exploit
Two CVSS 10.0 Flaws in Microsoft Cloud and Active Elementor Pro Exploit On 3 September 2026, the National Vulnerability Database published two critical…
- The Daily CVE Update
Sangoma Switchvox and SonicWall SMA1000: CISA Confirms Active Exploits
Sangoma Switchvox and SonicWall SMA1000: CISA Confirms Active Exploits Two critical vulnerabilities affecting business infrastructure have been added to CISA’s…
- The Daily CVE Update
Three Critical Password Reset Flaws Expose 22,000 Exchange Servers
Three Critical Password Reset Flaws Expose 22,000 Exchange Servers Three critical vulnerabilities disclosed this week share a common weakness: password reset…
- The Daily CVE Update
PaperCut Under Active Attack: Two CVEs, One Failed Patch
PaperCut Under Active Attack: Two CVEs, One Failed Patch CISA confirmed on 31 August that two vulnerabilities in PaperCut NG and MF print management software…
- The Daily CVE Update
Critical Router and WordPress Vulnerabilities Demand Immediate Action
Critical Router and WordPress Vulnerabilities Demand Immediate Action This episode examines two urgent threat areas affecting UK small businesses: three…
- The Daily CVE Update
Authentication Bypass and Linux Kernel Flaws Under Active Exploitation
Authentication Bypass and Linux Kernel Flaws Under Active Exploitation Three critical vulnerabilities have been confirmed as actively exploited in the wild…
- The Daily CVE Update
SQL Server, WordPress Avada, and Gitea Under Active Exploitation
SQL Server, WordPress Avada, and Gitea Under Active Exploitation Three critical vulnerabilities are being actively exploited in the wild, all with patches…
- The Daily CVE Update
Adobe Campaign, WordPress Login Bypass, and Gitea Code Injection
Adobe Campaign, WordPress Login Bypass, and Gitea Code Injection Three CVSS 10.0 vulnerabilities landed in Adobe Campaign Classic within 24 hours, all enabling…
- The Daily CVE Update
Critical Flaws in HTML Sanitiser and Spreadsheet Library
Critical Flaws in HTML Sanitiser and Spreadsheet Library This episode examines five critical vulnerabilities published within 24 hours, all scoring CVSS 9.4 or…
- The Daily CVE Update
Active Exploitation of TrueConf, Microsoft CVSS 10.0 Flaws, and Elementor Pro
Active Exploitation of TrueConf, Microsoft CVSS 10.0 Flaws, and Elementor Pro On 20 August 2026, CISA confirmed active exploitation of two TrueConf Server…
- The Daily CVE Update
Active Exploitation of MSP Tools, CCTV Systems and Windows VPNs
Active Exploitation of MSP Tools, CCTV Systems and Windows VPNs This episode examines three concurrent exploitation campaigns targeting UK small business…
- The Daily CVE Update
SharePoint Zero-Auth Bypass, macOS Screen Sharing Flaw, Copilot Data Leak
SharePoint Zero-Auth Bypass, macOS Screen Sharing Flaw, Copilot Data Leak Three critical vulnerabilities confirmed as actively exploited demand immediate…
- The Daily CVE Update
WordPress Plugin and Router Botnet Threats Demand Immediate Patching
WordPress Plugin and Router Botnet Threats Demand Immediate Patching This episode examines two active cybersecurity threats affecting UK small businesses…
- The Daily CVE Update
Critical Router, WordPress, and VMware Exploits Now Public
Critical Router, WordPress, and VMware Exploits Now Public Three critical security vulnerabilities with publicly available exploit code were disclosed on 16…
- The Daily CVE Update
WordPress Backdoors and SharePoint Exploits: Two Preventable Threats
WordPress Backdoors and SharePoint Exploits: Two Preventable Threats Two critical vulnerabilities demand immediate attention from UK small businesses…
- The Daily CVE Update
Critical Vulnerabilities Threatening UK Businesses
Critical Vulnerabilities Threatening UK Businesses In today’s episode of The Daily CVE Update, Corrine explores critical vulnerabilities affecting UK small…
- The Daily CVE Update
Addressing IBM WebSphere Vulnerabilities
Addressing IBM WebSphere Vulnerabilities In this episode of The Daily CVE Update, Corrine Jefferson discusses critical vulnerabilities in IBM WebSphere, which…
- The Daily CVE Update
Critical Vulnerabilities: FortiOS and VeloCloud Threats
Critical Vulnerabilities: FortiOS and VeloCloud Threats In this episode of The Daily CVE Update, Corrine discusses crucial vulnerabilities affecting UK small…
- The Daily CVE Update
Critical Cyber Vulnerabilities Affecting UK Businesses
Critical Cyber Vulnerabilities Affecting UK Businesses In today’s episode of The Daily CVE Update, hosted by Corrine, we explore significant cybersecurity…
- The Daily CVE Update
Critical Threats: Microsoft Exchange and Azure Vulnerabilities
Critical Threats: Microsoft Exchange and Azure Vulnerabilities In this episode of The Daily CVE Update, Corrine delves into critical vulnerabilities affecting…
- The Daily CVE Update
Cybersecurity Threats Facing UK Businesses
Cybersecurity Threats Facing UK Businesses In this episode of The Daily CVE Update, Corrine Jefferson highlights critical vulnerabilities affecting UK small…
- The Daily CVE Update
Protecting Your Business from WordPress and Oracle Threats
Protecting Your Business from WordPress and Oracle Threats In today’s episode of The Daily CVE Update, host Corrine Jefferson guides UK small businesses…
- The Daily CVE Update
Protecting UK Businesses from Cyber Threats
Protecting UK Businesses from Cyber Threats Corrine Jefferson presents this episode of The Daily CVE Update, offering critical insights into threats facing UK…