Blast RadiusBreaches, patches and the damage report.https://security.nocoffeenews.com/enCISA Orders Immediate Patching of Multiple Actively Exploited Critical Vulnerabilitieshttps://security.nocoffeenews.com/posts/cisa-patching-mandates-exploited-vulnerabilities/https://security.nocoffeenews.com/posts/cisa-patching-mandates-exploited-vulnerabilities/Federal agencies must secure Citrix NetScaler, Oracle WebLogic, and Gitea instances against active remote code execution and cryptojacking campaigns.Thu, 27 Aug 2026 20:21:07 GMTCISACybersecurityPatch ManagementRansomwareWhatsApp Implements Multiple Passkeys and Alphanumeric Two-Step Verificationhttps://security.nocoffeenews.com/posts/whatsapp-security-updates-passkeys-2sv/https://security.nocoffeenews.com/posts/whatsapp-security-updates-passkeys-2sv/The messaging platform is expanding phishing-resistant authentication options and upgrading two-step verification to support complex passwords.Thu, 27 Aug 2026 12:54:26 GMTWhatsAppMetaSecurityAuthenticationAttackers exploit miniOrange SAML SSO plugin vulnerabilities in WordPresshttps://security.nocoffeenews.com/posts/miniorange-saml-auth-bypass/https://security.nocoffeenews.com/posts/miniorange-saml-auth-bypass/A silent patching oversight leaves paid versions of the miniOrange SAML 2.0 Single Sign On plugin vulnerable to authentication bypasses that grant administrative access.Thu, 27 Aug 2026 12:51:42 GMTWordPressSAMLAuthentication BypassXecurifyminiOrange