CISA Binding Operational Directive 26-04

Two product names and a three-day clock: the case for patching the pipeline first

An SC Media commentary says ColdFusion and Gogs exploitation shows adversaries going after developer platforms directly. The targeting logic holds up better than the remedy attached to it.