CISA KEV: Patch Critical Ubiquiti UniFi OS CVEs Before June 26
Patch Ubiquiti UniFi OS CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, then verify model-specific fixed versions and exposure.
Learn MoreColumn 1
Category: Web Hosting Security
Docker Content Trust Retirement: Migration Checklist for CI and Kubernetes
Docker is retiring Docker Content Trust and the Notary v1 service. Use this checklist to find DCT use, plan brownout tests, and migrate to Cosign or Notation.
Learn More
WordPress WooCommerce Scraper CVE-2025-69129 Removal Guide
CVE-2025-69129 and CVE-2025-69131 affect WordPress & WooCommerce Scraper Plugin through 1.0.7. Remove it, replace the import workflow, and verify WooCommerce.
Learn More
OptinMonster, TrustPulse, and PushEngage Supply Chain Incident Checklist
A protect-only WordPress site-owner checklist for the OptinMonster, TrustPulse, and PushEngage supply-chain incident: who should check, what to inspect, and when to rotate credentials.
Learn More
Mastra npm Supply-Chain Attack: Developer and CI Cleanup Checklist
Security researchers report that 140+ @mastra npm packages were affected by a supply-chain attack involving easy-day-js. Check lockfiles, CI runners, dependency caches, and exposed secrets before rebuilding.
Learn More
Malicious JetBrains Marketplace Plugins: AI API Key Safety Checklist
Aikido reports a coordinated JetBrains Marketplace campaign where AI-style IDE plugins copied developer AI API keys. Check installed plugins, remove suspicious tools, rotate exposed keys, and review developer…
Learn More
ShapedPlugin Pro Plugin Supply-Chain Compromise: WordPress Safety Checklist
Wordfence reports a ShapedPlugin Pro plugin supply-chain compromise through official licensed update channels. Inventory affected Pro plugins, remove unverified builds, scan the site, and rotate credentials where exposure…
Learn More
Joomla JCE CVE-2026-48907: Patch the KEV Editor Flaw
CISA added Joomla Content Editor CVE-2026-48907 to KEV. Update JCE Pro to 2.9.99.6 or later, apply the vendor patch package for older sites, and review Joomla for cleanup.
Learn More
Cisco SD-WAN Manager CVE-2026-20262: Patch the KEV File Write Bug
CISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 to KEV on June 15, 2026. Patch fixed software, restrict management access, and review admin activity.
Learn More
NPM 12 Install Script Changes: Hosting Build Checklist
NPM 12 changes npm install defaults in July 2026. Check CI, WordPress theme builds, native modules, Git dependencies, and approved scripts now.
Learn More