Protect
Cybersecurity
Security is built into how we run your IT. Every environment we manage is held to one defined baseline, and we keep checking that it still meets it.
What you get
Security as a standard
Endpoint, identity, email, patching and backup controls are part of the service from the start.
Weak spots followed through
Recurring vulnerability scans feed a prioritized list. Critical exposures are escalated, and fixes are tracked to completion.
Clear ownership of risk
If a baseline control is declined, we document the exception and who owns the risk, so gaps never go unnoticed.
What is included
Platforms we use: Huntress, SentinelOne, Avanan, Keeper Security and Evo.
- Endpoint detection and response on covered devices
- Multi-factor authentication for every eligible account
- Email security for covered mailboxes
- Recurring vulnerability scanning, with critical findings escalated
- Operating system and application patching
- Documented exceptions for any declined control
Security matched to your business
Every Techusys managed-services agreement includes a defined cybersecurity foundation. Organizations with greater security, operational, or regulatory requirements can receive enhanced identity protection, threat monitoring, access controls, and formal security governance.
The specific protections, review schedules, and service levels are established in each customer's agreement.
Also available
Added when your risk or scope calls for it.
- Security awareness training is available as part of our enhanced managed-security services, helping employees recognize phishing, social engineering, and other common threats.
- Identity threat detection and response
- Password management for your users
- Privileged access controls for administrator accounts
- Secure remote access service for staff working outside the office
- DNS filtering
- Centralized security log monitoring
- Dark web monitoring for leaked company passwords and data, with alerts when something turns up
- Written security policies and an incident response plan for your business
Known exploited vulnerabilities · Updated Oct 27, 2026
Threats change every week
A live feed of software flaws attackers are confirmed to be using, from the US government's public catalog.
Live from CISA, updated Oct 27, 2026
The US government's public list of software flaws that attackers are exploiting right now.
The US Cybersecurity and Infrastructure Security Agency (CISA) keeps a public list of software flaws that attackers are confirmed to be exploiting. Our recurring vulnerability scans look for flaws like these in every environment we manage, and critical findings are escalated.
32New actively exploited vulnerabilities in the last 30 days
Reporting window Sep 28, 2026 to Oct 27, 2026. The catalog holds 1,760 in all.
Known exploited vulnerabilitiesNewest first
- Adobe Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityRecord CVE-2026-48356 (opens in a new tab)
- Google BrotliGoogle Brotli Unchecked Return Value VulnerabilityRecord CVE-2026-111497 (opens in a new tab)
- PHP Group PHPPHP Stale Internal Request-State VulnerabilityRecord CVE-2026-109619 (opens in a new tab)
- PHP Group PHPPHP Memory Corruption VulnerabilityRecord CVE-2026-109618 (opens in a new tab)
- Arista VeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection VulnerabilityRecord CVE-2026-114625 (opens in a new tab)
- Collabora Online – Built-in CODE ServerCollabora Online – Built-in CODE Server OS Command Injection VulnerabilityRecord CVE-2026-110447 (opens in a new tab)
- Plex Media ServerPlex Media Server External Control of File Name or Path VulnerabilityRecord CVE-2026-96656 (opens in a new tab)
- Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) VulnerabilityRecord CVE-2026-96655 (opens in a new tab)
- Plex Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityRecord CVE-2026-96654 (opens in a new tab)
- Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) VulnerabilityRecord CVE-2026-96652 (opens in a new tab)
- Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element VulnerabilityRecord CVE-2026-110936 (opens in a new tab)
- EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityRecord CVE-2026-106931 (opens in a new tab)
- BeyondTrust Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityRecord CVE-2026-102764 (opens in a new tab)
- Fortinet Multiple ProductsFortinet Multiple Products Path Traversal VulnerabilityRecord CVE-2025-61624 (opens in a new tab)
- Atlassian Multiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityRecord CVE-2026-21589 (opens in a new tab)
- Cisco Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal VulnerabilityRecord CVE-2026-76519 (opens in a new tab)
- AhsayCBSAhsay AhsayCBS Command Injection VulnerabilityRecord CVE-2026-105134 (opens in a new tab)
- AhsayCBSAhsay AhsayCBS Improper Authentication VulnerabilityRecord CVE-2026-105133 (opens in a new tab)
- Palo Alto Networks PAN-OSPalo Alto Networks PAN-OS Code Injection VulnerabilityRecord CVE-2026-0322 (opens in a new tab)
- Microsoft WindowsMicrosoft Windows Command Injection VulnerabilityRecord CVE-2026-96951 (opens in a new tab)
- Ivanti Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing VulnerabilityRecord CVE-2026-104935 (opens in a new tab)
- StrapiStrapi Cleartext Storage of Sensitive Information VulnerabilityRecord CVE-2023-22894 (opens in a new tab)
- ONLYOFFICE DocsONLYOFFICE Docs Server Path Traversal VulnerabilityRecord CVE-2021-3199 (opens in a new tab)
- Apache StrutsApache Struts Command Injection VulnerabilityRecord CVE-2016-3081 (opens in a new tab)
- ISC BIND ISC BIND Data Processing Errors VulnerabilityRecord CVE-2015-5477 (opens in a new tab)
- ProFTPDProFTPD Improper Access Control VulnerabilityRecord CVE-2015-3306 (opens in a new tab)
- Citrix NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityRecord CVE-2026-88779 (opens in a new tab)
- Zammad GmbH ZammadZammad GmbH Zammad Improper Privilege Management VulnerabilityRecord CVE-2026-102490 (opens in a new tab)
- Zammad GmbH ZammadZammad GmbH Zammad Session Fixation VulnerabilityRecord CVE-2026-102489 (opens in a new tab)
- Fortinet FortiMailFortinet FortiMail Path Traversal VulnerabilityRecord CVE-2026-104286 (opens in a new tab)
- Cisco Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityRecord CVE-2026-76504 (opens in a new tab)
- Apple Multiple ProductsApple Multiple Products Out-of-Bounds Write VulnerabilityRecord CVE-2026-86950 (opens in a new tab)
Worth knowing
All articles- ExplainerAttackers don't always break in. Sometimes they ask.Read
- ExplainerHow phishing works when your email is in the cloudRead
- ExplainerWhy antivirus became EDRRead
- ExplainerYour computer is protected. Is your email?Read
- ExplainerWhen a vendor's bank details suddenly changeRead
- ExplainerAttackers use flaws that already have a fixRead
Talk to us about your IT
Tell us what you run today and what is getting in the way. We will get back to you about how we can help.