Daily cybersecurity vulnerability reports, threat intelligence, and expert remediation guidance from Jordan Polasek, Founder of BVTech LLC. Real CVEs sourced from CISA KEV and NVD — analyzed for Texas businesses.
Fresh CISA KEV analysis with real remediation steps. Written personally by Jordan Polasek every Sunday — plus a mid-week supplement when the catalog gets noisy. Drawing on 13+ years of Texas MSP experience.
CISA added Drupal Core CVE-2026-9082 to KEV this morning — active exploitation within days of the patch. Plus last Wednesday's Microsoft Defender double (CVE-2026-41091 + CVE-2026-45498) and the Cisco Catalyst SD-WAN Controller Emergency Directive 26-03 from May 14. Three urgent items in one week.
Two CVEs added to CISA KEV — Langflow (LLM workflow builder) and Trend Micro Apex One. Why "AI tooling" is now real attack surface, and how to inventory LLM and security-product dependencies for the rest of 2026.
Voice cloning, perfect business English, vendor impersonation that references real ongoing matters. The 2018 anti-phishing training playbook does not work in 2026 — here are the four concrete changes that still do.
CVE-2026-6973 formally lands on KEV. CVE-2026-42897 is patched but the PoC is loose. Eight months of weekly recaps and the perimeter story has not changed — here is why, and what to actually do about it.
After two manic weeks at CISA, just one KEV add this time around. Use the spare bandwidth for what most SMBs never do: vendor security posture review and a real MFA audit. The checklist is here.
Twelve CVEs across two CISA KEV updates in one week, three of them a Cisco SD-WAN Manager critical-triple with a three-day federal deadline. Plus PaperCut ransomware (Lace Tempest / Clop) and the SimpleHelp pair Akira is running against MSPs.
CISA added six CVEs to KEV — including a 2012 Microsoft VBA flaw and a Fortinet SQL injection (CVE-2026-21643) that Storm-1175 is using to deploy Medusa ransomware. Technical debt is security debt that eventually comes due.
A Fortinet pre-authentication API bypass with a three-day federal deadline, plus the Shadowserver early warning on Ivanti EPMM. Why 22% of breaches in 2025 came through edge appliances and what Texas SMBs should do about it.
Three critical CVEs that opened our weekly recap cadence — CVE-2026-5281 (Chrome), CVE-2026-3055 (Citrix NetScaler), and the TrueConf integrity flaw. Step-by-step remediation for each.
Every BVTech News post is written personally by Jordan Polasek, drawing from the CISA Known Exploited Vulnerabilities catalog, the National Vulnerability Database, and 13+ years of Texas MSP experience. No AI slop, no rewritten press releases — just actionable intelligence for small and medium businesses.
Call Jordan Polasek directly. BVTech provides emergency cybersecurity remediation for Texas businesses — same-day response across San Antonio, Houston, Austin, and the rest of the state.
EN
ES