Security threats you should act on.
Critical vulnerabilities, practical guides and clear security tips. For businesses and security-conscious individuals in Åland, Finland and Sweden.
Worth your attention
Prioritise what affects youGuides to help you take action
All guides & tips ↗Find the right article
Clear search and filtersFortiMail: Traficom warns of active exploitation
Email security products need updates too. Traficom reports a critical FortiMail vulnerability with confirmed exploitation.
GitLab 10.0: check your own server
A critical vulnerability in GitLab CE and EE may allow code execution. Check the version, upgrade path and signs of earlier compromise.
Brotli 9.2: the flaw may be in a dependency
Brotli is embedded in other programs. Check that the vulnerable component is also updated when the main program is patched.
PHP: update the systems you might overlook
Two critical vulnerabilities affect PHP. Inventory web servers, applications and embedded components, and check that the corrected packages are actually running.
Clicked a scam link? Do this first
Start with what actually happened: did you only open the page, enter information or run a file? That determines the next step.
Suspected Microsoft 365 account compromise: a practical IT checklist
A password change is only part of the work. Restrict access, review remaining access paths and check email rules and logs.
Windows 11: install the fix and check that it is really complete
Find the update, restart at a planned time and verify the correct KB or version number, even if the computer says it is up to date.
A vulnerability has been found – take it through to a verified fix
Move from an alert to a confirmed fix. A practical workflow for checking the product, prioritising, updating and testing.
Start with email: make your sign-in harder to hijack
Prioritise email and administrator accounts. Use passkeys where supported and arrange recovery before you need it.
Your backup is only useful when you can restore it
A green status is not enough. Restore something important to a separate location and check that it is usable.
Latest updates
All updates ↗Articles, site changes and source checks, newest first. All times use Åland/Finland time.
Update timestamp and history added
Source check partially completed
Sources checked: 13.
FortiMail: Traficom warns of active exploitation ↗
GitLab 10.0: check your own server ↗
Brotli 9.2: the flaw may be in a dependency ↗
Severe does not always mean relevant to you.
CVSS describes technical severity. Your priorities also depend on product, version, exposure and confirmed exploitation. Check what actually affects your environment.