Tech Blog

everyWAN Blog

Technology, cybersecurity and IT trends that matter

Deep Analysis

Cybersecurity

IT Trends

Filter by:

Check Point SmartConsole

Zero-day CVE-2026-16232 · exposed management

24 Jul 2026 5 min read

The Check Point zero-day wasn't after your firewall: it was after its console

CVE-2026-16232: an authentication bypass in SmartConsole allowed logging into the server that governs all your Check Point gateways as an administrator, with no credentials. It was exploited before the patch existed and CISA gave three days to remediate. Why the management plane is a bigger prize than the firewall itself, and the checklist that applies even without Check Point.

Firewall Cybersecurity Security

31.4 Tbps DDoS

RTBH: mitigated upstream

23 Jul 2026 5 min read

Your firewall can't stop a DDoS: the latest record hit 31.4 Tbps. Real mitigation happens upstream

In December 2025 the largest DDoS on record was mitigated: 31.4 Tbps, roughly 31,000 times the capacity of a 1 Gbps fibre. By the time that traffic reaches your firewall, the battle is already lost. What RTBH is, why a local blackhole won't save your link, and what to ask your provider.

DDoS Networks Cybersecurity

FakeGit

7,600 fake repos; your AI is the target

23 Jul 2026 5 min read

Malware no longer fools you: it fools your AI. FakeGit and its 7,600 fake GitHub repositories

The FakeGit campaign seeded GitHub with 7,600 fake repositories; roughly 200 of them alone account for over 14 million malware downloads. The news isn't the volume: more than 800 posed as MCP servers and AI skills, and the assistants recommended them on their own. It has a name now: agentbaiting.

AI Cybersecurity GitHub

Romania's land registry

Wiped; saved by the out-of-reach copy

22 Jul 2026 5 min read

Romania's land registry was wiped, backups included. It was saved by the copy the attacker couldn't touch

On July 14 an attacker got into Romania's ANCPI with valid credentials, failed to extort the agency, and wiped the land registry database plus every backup within reach. A week with no property sales or mortgages nationwide. The difference between incident and catastrophe was one copy beyond his reach.

Backup Ransomware Cybersecurity

wp2shell

Patch to exploit in 48h

22 Jul 2026 5 min read

wp2shell: WordPress patched on Friday, the exploits landed by Sunday. Who maintains your website?

On July 17 WordPress shipped 6.9.5 and 7.0.2 to plug wp2shell, a no-login RCE in core. It was being exploited that same evening, and by Sunday there were more than twenty public exploits. The uncomfortable question isn't technical: who is responsible for updating your website?

WordPress Security Maintenance

SonicWall SMA 1000

22 days exploited unpatched

21 Jul 2026 5 min read

22 days inside: the SonicWall SMA 1000 zero-days and why the perimeter VPN is no longer the defense — it's the target

Zero-days CVE-2026-15409 and CVE-2026-15410 were exploited from June 22, 22 days before the patch, with theft of credentials and MFA seeds. Why the VPN appliance is the perfect target and what to do beyond patching.

Security Cybersecurity Zero Trust

Patch Tuesday 07/2026

622 CVEs, 3 zero-days

20 Jul 2026 5 min read

622 patches in a single Tuesday: Microsoft's record and why prioritizing by CVSS is a mistake

Microsoft breaks its record with 622 vulnerabilities fixed in the July 2026 Patch Tuesday, three zero-days included. The one actively exploited against SharePoint scores 5.3: here's how we triage when patching everything is not an option.

Security Microsoft Patch Tuesday

Subscribe to our newsletter

To receive IT stories, everyWAN news and exclusive subscriber offers, sign up to our mailing list

I agree to receive commercial communications from MINORISA DE SISTEMAS INFORMÁTICOS Y DE GESTIÓN, S.L., in accordance with the privacy policy, which I have read and accept without reservations, which contains additional information about the processing of my data and about the exercise of my rights of access, rectification, restriction, erasure, objection and portability.

Legal Notice - Privacy policy - Cookie policy - Cookie settings - Terms of use - Whistleblower Channel

Language
- ES
- CAT
- EN