The LinkLoot Blog

9/25/2026 4 min

Cloudflare makes MCP server portals generally available with DLP controls

Cloudflare has made MCP server portals generally available, adding a governed endpoint for approved servers with Access, Gateway routing, DLP scanning, service tokens, and Logpush.

9/25/2026 4 min

GitHub adds proof-of-presence checks for high-impact actions

GitHub Enterprise Cloud now lets eligible Entra-backed enterprises require fresh re-authentication or MFA before sensitive administrative actions.

GitHub sets October 14 SSH key deadline and November 4 brownout

GitHub will require new RSA SSH keys to be at least 3072 bits from October 14 and will brown out SHA-1 RSA signatures and an older Diffie-Hellman exchange on November 4. Developers using SSH remotes should check client support and key configuration before the rollout.

CVE-2026-71362 is exploited; Adobe Commerce teams face a September 27 deadline

CISA added CVE-2026-71362 to its Known Exploited Vulnerabilities Catalog on September 24. Adobe Commerce, Commerce B2B, and Magento Open Source operators should patch to the fixed August builds by the September 27 federal remediation deadline.

CISA gives Zyxel GS1900 owners a September 24 patch deadline

CISA lists CVE-2026-7273 in its Known Exploited Vulnerabilities Catalog with a September 24 remediation deadline; Zyxel has released firmware patches for affected GS1900 switches.