FBI Ousts Contractor Over Missed Patch
FBI cyber chief says a third-party contractor failed to apply a security patch, enabling the ShinyHunters breach of employee data.
30 results for “patching”
FBI cyber chief says a third-party contractor failed to apply a security patch, enabling the ShinyHunters breach of employee data.
Atlassian warns datacenter users to patch a 9.3-rated arbitrary file access flaw or pull instances off the internet.
Dell has patched 18 CVEs in its storage and update tools, including two maximum-severity flaws with no workarounds.
Citrix rushed out emergency updates for a SAML authentication flaw already exploited in attacks, but administrators may need to patch twice.
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
CISA will stop publishing its weekly known-vulnerabilities bulletin from September 28, citing a new risk-based patching directive.
A researcher published working local-root exploits for four Linux kernel bugs fixed weeks earlier, flagging a patching race for older systems.
Google's September 2026 Pixel update fixes 110 flaws, including a modem zero-day exploited in limited, targeted attacks.
Gartner's Craig Lawson suggests AI bug-hunting could cut vulnerability severity next year as technical debt gets paid down.
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
Attackers exploit exposed SSH on MikroTik routers for full admin access; CERT Polska urges patching.
Plex warns users to update Media Server and Desktop clients to fix multiple undisclosed security flaws.
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
GitLab's CVE-2026-19478 is under active exploitation, days after disclosure, urging immediate patching.
CISA orders federal agencies to fix actively exploited Ray bug in 3 days, citing unique risk.
A growing backlog of unresolved vulnerabilities is not a security problem but an organizational failure of ownership, capacity, and decision-making.
ACRO's unpatched Kentico CMS exposed sensitive data of up to 10,920 people, with alerts unread for months.
Adobe's latest security update addresses over 50 vulnerabilities, with critical fixes for ColdFusion and Campaign Classic rated as top priority.
CISA warns of active exploitation of critical command injection flaw in Progress Kemp LoadMaster; urges patching.
Cisco has released security patches addressing two dozen vulnerabilities across its product lines, including several critical defects.
SecurityUnderstanding the lifecycle of Common Vulnerabilities and Exposures and how to maintain a defensible security posture in your network.
Google implements dynamic patching and accelerated release cadences to combat a record-breaking surge in browser vulnerability reports.
Recent updates address hundreds of vulnerabilities across iOS and macOS platforms, highlighting significant risks in kernel security.
A record 1,449 vulnerabilities highlight the growing operational strain on IT teams as AI-driven discovery accelerates patch release cycles.
F5 has issued an urgent series of patches addressing eight critical and high-severity vulnerabilities across its NGINX and BIG-IP lines.
The rise of AI-driven vulnerability discovery is forcing a fundamental rethink of traditional, schedule-based security remediation.
Multiple cybersecurity vendors release urgent updates to address critical vulnerabilities in widely used enterprise protection tools.
Mozilla, Google, Adobe, and VMware issue urgent security patches to address a wave of critical vulnerabilities across major platforms.