Cyber threats, as they happen

A popular tool for building business websites can be tricked into accepting files from anyone on the internet. Threat actors are using it to plant their own code and take over the site.

What to do: If your website runs on Joomla with SP Page Builder, have whoever manages it install the fix now.

A tool teams use to build AI workflows lets one user reach into another user's work and run it. In a business account, that means a low-level login can touch things it never should.

What to do: If your team experiments with Langflow, update it and check who has accounts.

Another website building tool is letting strangers upload files without logging in. Once a bad file is on the site, threat actors can run their own code and control the website.

What to do: If your website uses this Joomla page builder, ask your web person to patch it right away.

ColdFusion powers many older business web applications, including billing and customer portals. A flaw lets threat actors reach files they should never see and run their own code on the server.

What to do: If any of your systems run on ColdFusion, confirm the latest Adobe update is installed.

Businesses that run their own SharePoint server for file sharing are being actively targeted. An attacker with any working login can use this flaw to run their own code on the server, which can expose every document stored there.

What to do: If your company hosts its own SharePoint, make sure this patch is applied. Microsoft 365 in the cloud is not affected the same way.

A tool many IT companies use to log into business computers can be tricked into granting a stranger full access, in some cases skipping the extra login code.

What to do: If your IT provider uses SimpleHelp, confirm they have installed the fix.