SecurityFortra BoKS Patches Fix Critical Auth Bypass
Fortra fixed eight bugs in BoKS, including a 9.9-severity auth bypass and a 9.1 command injection, but reported no known exploitation.
> Search
30 results for “patches”
Security
Cyber CrimeFortinet Zero-Day Hits FortiMail Gateways
Fortinet reports active exploitation of a critical FortiMail flaw, with patches still pending and CISA ordering federal fixes by October 4th.
SecurityWatchGuard Patches 15 Fireware OS Flaws
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
SecurityWordPress 7.1.2 Patches Critical LFI-to-RCE Flaw
WordPress fixed a critical flaw in versions 4.7.0 through 7.1.1 that can lead to code execution on servers lacking a page-prefixed theme folder and register_argc_argv off.
SecurityOracle's Monthly Patch Push Targets Fusion Middleware
Oracle's September update delivers 673 patches across 17 product families, with Fusion Middleware carrying five maximum-severity flaws.
Tech NewsEmergency Windows patches target RDS failures
Microsoft shipped out-of-band updates to fix Remote Desktop Services breakage from September's security releases, plus Hyper-V and USB audio issues.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
Cyber CrimePatch-Gap Zero-Days Fueled BlueMoon Kit
A new exploit kit chains four Chrome and Windows flaws, revealing how quickly attackers weaponize the delay between open-source fixes and stable browser patches.
SecurityWeChat worm exploited before calls answered
Tencent patches zero-click flaw that allowed account takeover via VoIP calls.
SecurityFortinet Critical Patches Target JWT Bypass and Browser Proxy
Fortinet patches two critical flaws: one bypassing FortiMonitorOnSight auth via JWT, another allowing browser traffic proxy.
SecurityChrome Fixes 230 Flaws; 7th Zero-Day Exploited
Google patches an in-the-wild V8 out-of-bounds write bug, marking the seventh exploited zero-day this year.
SecurityNew Record in Microsoft Patches
Microsoft fixes 974 flaws, including two exploited zero-days, but only a few matter to most orgs.
Tech NewsChrome's Faster Fixes Set New Browser Baseline
Google moves Chrome to a two-week release cycle to speed security patches and feature delivery.
SecurityVMware patches critical host-code execution flaw
Broadcom patched one critical and one high-severity VMware Workstation and Fusion vulnerability, both enabling host code execution.
SecurityWindows 2026 Bug Patch? No, the Cloud
Microsoft's cloud patches, Dropbox account breaches, and Guardio's $1.1B funding round headline this week's security news.
SecurityChrome V8 Zero-Day Under Attack Gets Emergency Patch
Google patches a high-severity type confusion bug in V8 that has been exploited in the wild, the sixth zero-day fixed this year.
SecuritySonicWall SMA 1000 Zero-Days Exploited in Chained Attacks
SonicWall patches two zero-days in SMA 1000 VPN appliances, warning of active exploitation that combines both flaws.
SecurityServiceNow Tackles Maximum-Severity Flaws
Patches cover three critical code injection bugs and a sandbox escape in the Now Platform.
SecurityKeycloak flaw lets unauthorized password resets
CVE-2026-18963 allows full account takeover via reset flow; patches out.
SecuritySpring Framework's 91 Flaws: A Wake-Up Call
Broadcom patches 91 Spring vulnerabilities, with one critical flaw exposing LDAP servers to attack.
SecurityCitrix NetScaler flaws: patch gap may invite attackers
Citrix warns of two NetScaler flaws, including an auth bypass, urging immediate patches.
AI & MLAI Patch Flood: Why the Bug Bonanza Won't End Anytime Soon
AI is supercharging both bug discovery and bug creation, driving patch counts to record highs — and reshaping how software gets fixed.
SecurityUnauthenticated SAP Flaw Earns Maximum CVSS Score
SAP ships urgent patches for Commerce Cloud and other critical flaws rated up to 10.0.
SecurityChipmakers Patch Over 80 Bugs, Including Severe Flaws
Intel and AMD release combined patches for more than 80 vulnerabilities, including high-severity issues in processors and software.
SecurityIvanti Endpoint Manager Patches Critical Flaws
Ivanti releases updates for Endpoint Manager and Neurons for MDM addressing remotely exploitable vulnerabilities.
SecurityMicrosoft Patches 398 Flaws, One Exploited
August's Patch Tuesday addresses 398 vulnerabilities, including an actively exploited zero-day, as AI-driven discovery swells update volumes.
SecuritySAP's Critical Patches Close Zero-Day-Style Gaps
SAP's August 2026 patch batch addresses 28 flaws, including a 10/10 severity bug in Commerce Cloud that could allow attackers to bypass authentication and execute code.
SecurityMetabase Zero-Day Exploited Before Patch
Critical SQL injection flaw in Metabase allowed zero-day attacks; urgent patches released for self-hosted users.
SecurityCisco Addresses Critical Device Flaws
Cisco has released security patches addressing two dozen vulnerabilities across its product lines, including several critical defects.