CISO Open Letter

JPMorgan Chase CISO Warns of SaaS Security Crisis and Supply Chain Risk

JPMorgan Chase CISO Warns of SaaS Security Crisis and Supply Chain Risk

Do Son April 30, 2025

JPMorgan Chase CISO urges software providers to prioritize security in SaaS delivery, warning of rising risks to global infrastructure and supply chains.

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-118527CVSS 4.3
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
Admin intel📅 Updated: Oct 30, 2026
CVE-2026-118539
This module enables you to sell goods and services to customers through an included shopping cart and checkout...
Admin intel📅 Updated: Oct 29, 2026
CVE-2022-31034CVSS 8.3
Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
Watchtower Verified📅 Updated: Oct 29, 2026
CVE-2026-112353CVSS 6.2
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
Watchtower Verified📅 Updated: Oct 29, 2026
CVE-2026-116779CVSS 9.8
Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
CISA KEV📅 Added to KEV: Oct 29, 2026
CVE-2026-76418CVSS 8.6
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Oct 29, 2026
CVE-2026-116690CVSS 7.5
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
Admin intel📅 Updated: Oct 28, 2026

CVE-2026-86413CVSS 9.1
When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl...
📅 Updated: Oct 30, 2026
CVE-2026-86414CVSS 9.1
An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to...
📅 Updated: Oct 30, 2026
CVE-2026-87861CVSS 9.1
When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection...
📅 Updated: Oct 30, 2026
CVE-2026-119568CVSS 9.1
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data...
📅 Updated: Oct 30, 2026
CVE-2026-119418CVSS 9.2
CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame...
📅 Updated: Oct 30, 2026
CVE-2026-119419CVSS 9.2
CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated collation...
📅 Updated: Oct 30, 2026
CVE-2025-31704CVSS 9.8
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially...
📅 Updated: Oct 30, 2026
CVE-2026-116366CVSS 9.5
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with...
📅 Updated: Oct 30, 2026