Threat awareness

Threat awarenessEXPLAINER · 4 MIN READ

Apple’s M5 MIE bypass: what the researchers demonstrated

Calif combined two macOS bugs to gain root on an M5 Mac while MIE remained enabled. Apple patched them in macOS 26.6. Here’s what the result says about memory tagging.

Threat awarenessEXPLAINER · 3 MIN READ

Adobe’s September Acrobat fixes: what happens when you open a PDF

The update addresses memory corruption and authorization flaws across Acrobat’s update tracks. Check the reader people use and the protections applied to outside documents.

Threat awarenessEXPLAINER · 3 MIN READ

Firefox’s September update: use-after-free bugs and sandbox escapes

Mozilla’s fixes cover Firefox 155 and two ESR branches. The advisories explain the risks, but checking the right update still starts with knowing which channel is installed.

Threat awarenessEXPLAINER · 3 MIN READ

Apple ImageIO CVE-2026-65346: the risk inside image decoding

Apple fixed an integer overflow in ImageIO. Here’s how image-size calculations can go wrong, what Apple has disclosed and why the operating-system update matters.

Threat awarenessEXPLAINER · 6 MIN READ

Why a vendor patch date and a CISA catalog date can differ

Four Apple, Google and Microsoft cases show why patch announcements and known-exploitation records belong in the same workflow, without treating either date as the start of an attack.

Threat awarenessEXPLAINER · 5 MIN READ

Chrome CVE-2026-85046: what the exploited V8 bug tells us

Google confirmed exploitation of a V8 type-confusion flaw. The advisory identifies the fix, but leaves the underlying failure and the rest of any exploit chain undisclosed.

Threat awarenessEXPLAINER · 5 MIN READ

A supplier changed their bank details. How do you know it’s really them?

A fraudulent payment request can pass SPF, DKIM and DMARC. Here’s what those checks establish, what evidence to keep, and how to verify the transaction itself.

Threat awarenessGUIDE · 4 MIN READ

Which security updates should you install first?

CVSS, EPSS and known exploitation answer different questions. Use them alongside your own inventory and exposure, then verify that the fixed software is actually running.