September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch…
Tag: Patch & Updates
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a…
Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys (Updated)
Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.
Google Chrome Update Fixes 247 Security Flaws, Including 4 Critical Bugs
Google Chrome 155 fixes 247 security vulnerabilities, including four Critical use-after-free flaws. See what security teams should do now.
Google’s October Android Update Patches 7 Critical Security Vulnerabilities
Google’s October Android security update patches seven critical vulnerabilities, including flaws that do not require user interaction.
Samsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices
Samsung’s October 2026 security update patches nine critical Android flaws and multiple Galaxy vulnerabilities. Here’s what users should update.
Google October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support
Google’s October 2026 update patches critical Pixel flaws, fixes VoIP and keyboard bugs, and may mark the end of regular support for Pixel 6.
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company’s network and…
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the…
Cisco Patches a Dozen Critical Vulnerabilities
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out…
Google issues Android security updates: who can get them and how
Google has new Android updates, but many users will not be able to get patched immediately.
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting…
SonicWall and Splunk Patch Critical Vulnerabilities
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges.
Chrome 155 Update Patches 247 Vulnerabilities
Google has released Chrome version 155, addressing a total of 247 security vulnerabilities in what represents one of the browser’s most substantial…
Gitea Patches 27 Security Flaws, Including Critical SSH Authentication Bypass and SSRF
Gitea has released security updates addressing 27 reported flaws across versions 28.0.0 and 28.1.0, including a critical SSH authentication bypass and…
Update Chrome and ChromeOS to fix critical security issues
Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don’t delay.
wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass
wolfSSL has released wolfSSH version 1.6.0, which addresses five security vulnerabilities, including a critical flaw that could allow a man-in-the-middle…
Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution
Splunk has released security updates to fix a critical Splunk Enterprise vulnerability that could let an attacker run operating system commands without…