Cisco has patched critical License On-Prem vulnerabilities, including a maximum-severity cryptographic signature flaw. Administrators must check two…
Tag: Patch & Updates
IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs
IBM patched 22 vulnerabilities in Verify Identity Access and Security Verify Access, including two critical flaws allowing unauthenticated remote code…
Cisco Meraki Security Update Fixes Critical Flaws, With Some Patches Still Pending
Cisco disclosed seven Meraki vulnerabilities affecting six product families. Some firmware fixes are available, while others remain scheduled for October…
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within…
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and…
AI vulnerability patching has a grading problem
Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the…
What makes some open source updates so difficult?
Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still…
Week in review: FortiBleed is still active, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare…
Attackers Are Already Exploiting SonicWall’s Freshly Patched Max-Severity SMA1000 Flaw
Just three days after SonicWall shipped a patch for a maximum-severity vulnerability in its SMA1000 secure remote access appliances, attackers have…
Microsoft Warns Outdated Windows Devices Could Lose All Updates in 2027
Microsoft warns outdated Windows devices could lose access to all updates in 2027. Learn which versions are affected and what security teams should do.
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy…
Hackers Exploit Two Unpatched AhsayCBS Flaws to Deploy Webshells and Cryptominers
Two security flaws in AhsayCBS backup management software are currently being actively exploited by attackers to initiate remote access to the targeted…
Citrix gives NetScaler admins another critical reason to patch
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
ASOS breach update: Hackers stole customer details and shopping searches
Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation.…
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully…
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and…
October 2026 Patch Tuesday forecast: Time for an Office cleanup
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch…