SecurityCISA Sets October 11 Patch Deadline
Five Flax Typhoon–exploited flaws join CISA's KEV catalog as federal agencies face an October 11, 2026, patch-or-discontinue deadline.
> Search
30 results for “patch”
Security
Cyber CrimeUnpatched AhsayCBS Bugs Exploited as Zero-Days
Attackers are chaining two unpatched AhsayCBS vulnerabilities to gain remote code execution and deploy webshells, with at least five organizations targeted.
Cyber CrimeFBI Ousts Contractor Over Missed Patch
FBI cyber chief says a third-party contractor failed to apply a security patch, enabling the ShinyHunters breach of employee data.
SecurityAtlassian's unpatched datacenter flaw
Atlassian warns datacenter users to patch a 9.3-rated arbitrary file access flaw or pull instances off the internet.
SecurityDell's 18 Flaws Open Storage to Attackers
Dell has patched 18 CVEs in its storage and update tools, including two maximum-severity flaws with no workarounds.
SecurityNetScaler Zero-Day Poses Patching Puzzle
Citrix rushed out emergency updates for a SAML authentication flaw already exploited in attacks, but administrators may need to patch twice.
SecurityFortra BoKS Patches Fix Critical Auth Bypass
Fortra fixed eight bugs in BoKS, including a 9.9-severity auth bypass and a 9.1 command injection, but reported no known exploitation.
SecurityGitLab's 9.9 Gateway Flaw: Self-Hosters First
GitLab patched a critical AI Gateway flaw scoring 9.9, but the fix only reaches organizations running their own gateway.
Cyber CrimeFortinet Zero-Day Hits FortiMail Gateways
Fortinet reports active exploitation of a critical FortiMail flaw, with patches still pending and CISA ordering federal fixes by October 4th.
SecurityMicrosoft: Attackers Lead AI Arms Race
Microsoft's 2026 Digital Defense Report finds attackers are gaining AI advantages faster than defenders, risking a spike in unpatched vulnerabilities.
SecurityZimbra Flaw Exploited Before Disclosure
Microsoft says attackers probed and exploited a Zimbra command injection flaw in the window between patch release and public disclosure.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
SecurityGoogle: AI Is Rewriting Bug Economics
GTIG data shows vulnerability disclosures doubled in 2026 while exploitation shifted toward n-days, with AI-discovered flaws carrying a riskier profile.
SecurityWatchGuard Patches 15 Fireware OS Flaws
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
SecurityF5 zero-day hits BIG-IP APM deployments
F5 patched a critical BIG-IP APM zero-day exploited in remote code execution attacks, as CISA ordered federal agencies to secure networks by Friday.
SecurityCheck Point Zero-Day Hit Management Servers
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
SecurityWordPress 7.1.2 Patches Critical LFI-to-RCE Flaw
WordPress fixed a critical flaw in versions 4.7.0 through 7.1.1 that can lead to code execution on servers lacking a page-prefixed theme folder and register_argc_argv off.
Cyber CrimeFBI breach claim tied to PeopleSoft 0day
ShinyHunters says it used an unpatched Oracle PeopleSoft flaw to hit FBI systems, steal terabytes of data, and demand a report retraction.
SecurityCISA Ends Weekly Vulnerability Bulletin
CISA will stop publishing its weekly known-vulnerabilities bulletin from September 28, citing a new risk-based patching directive.
SecurityFour Kernel Flaws, Public Exploits, One Fix
A researcher published working local-root exploits for four Linux kernel bugs fixed weeks earlier, flagging a patching race for older systems.
SecurityWhat Microsoft's AI Patch Wave Means
Microsoft patched 18 vulnerabilities across Azure and Copilot products, all rated critical, with fixes applied server-side so customers need not act.
SecurityCheck Point's Fifth Critical Flaw Since July
A new 9.8-severity stack overflow lets unauthenticated attackers hit Security Management Servers as root, and it's not the first this summer.
SecurityCisco ISE Zero-Day Under Attack
Cisco has fixed a maximum-severity ISE authentication bypass that attackers are already exploiting, and CISA set a three-day federal patch deadline.
SecurityWindows 11 Update Breaks Domain Trust
Administrators report that the KB5124008 security update breaks domain trust on some enterprise systems, pointing to a security feature as the likely cause.
SecurityOracle's Monthly Patch Push Targets Fusion Middleware
Oracle's September update delivers 673 patches across 17 product families, with Fusion Middleware carrying five maximum-severity flaws.
SecurityScreenConnect Flaw Under Attack, Patch Urged
CISA orders federal agencies to fix a critical ConnectWise ScreenConnect flaw exploited in the wild, with over 1,000 instances still exposed.
SecurityPixel Zero-Day Patched After Targeted Attacks
Google's September 2026 Pixel update fixes 110 flaws, including a modem zero-day exploited in limited, targeted attacks.
SecurityMythos May Ease 2027 Patching Load
Gartner's Craig Lawson suggests AI bug-hunting could cut vulnerability severity next year as technical debt gets paid down.
Cyber CrimeCisco Email Gateway Flaw Under Attack
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.