https://rootnotes.in/article/siteguard-cve-2026-106931-the-vector-says-local-and-the-patch-deletes-the-evidence Root Notes en 2026-10-19T05:56:01.739Z The SiteGuard flaw is being exploited, the fix erases the proof, and the vector says local rather than remote https://rootnotes.in/article/varonis-the-filing-discloses-two-premiums-and-the-coverage-printed-one Root Notes en 2026-10-19T05:55:50.540Z Proofpoint is paying $6.3 billion for Varonis at a 52 percent premium, and the filing also discloses a 17 percent one https://rootnotes.in/article/connectwise-day-four-three-products-down-and-no-restoration-time Root Notes en 2026-10-19T05:50:42.937Z ConnectWise is on day four with three products suspended, and nobody can restore a backup https://rootnotes.in/article/pwnescape-patching-your-vm-does-nothing-the-bug-is-on-the-host Root Notes en 2026-10-17T10:25:33.247Z PwnEscape is not a hypervisor bug, so patching your virtual machine does nothing at all https://rootnotes.in/article/french-refrigeration-attacks-the-two-documents-do-not-say-what-the-coverage-says Root Notes en 2026-10-17T10:24:49.997Z Everyone wrote the French fridge attacks as a Danfoss story caused by known bugs. The two primary documents support neither half https://rootnotes.in/article/connectwise-cloud-backup-the-fix-and-the-service-are-the-same-switch Root Notes en 2026-10-17T10:24:11.413Z ConnectWise turned off Cloud Backup to contain the breach, which means the fix and the service are the same switch https://rootnotes.in/article/aomei-update-tampering-five-minute-windows-and-the-triage-trap Root Notes en 2026-10-17T06:47:56.497Z The backdoor was on the update server for five minutes, which is why the alerts were dismissed as false positives https://rootnotes.in/article/blockstrap-cve-2026-103849-cvss-10-and-a-thirty-day-window Root Notes en 2026-10-17T06:47:03.167Z A CVSS 10.0 in Magento, rated priority 2, with thirty days to patch — and four working routes found in twenty-four hours https://rootnotes.in/article/openbsd-big-fish-the-exploit-needed-no-information-leak Root Notes en 2026-10-17T06:46:08.024Z A counter that has been a signed 16-bit short since 1988 gives root on OpenBSD, and the exploit needed no information leak