Tag

Patch Management

22 articles
Advertisement
Articles22
Six antique keys of similar pattern laid out flat on a white surface Cybersecurity 5 min SolarWinds Shipped a Hard-Coded Key in Access Rights Manager The advisory names no victim and no campaign, and the vector says adjacent network rather than the open intern... PR Priya Nair 20 Sep The inside of a computer case lit red, with a power supply, cooling fan, cables and a stack of drive bays. Cybersecurity 6 min A Plesk Backup Restore Lets a Hosting Customer Get Root on the Whole Server CVE-2026-68488 needs only a customer's own panel login and FTP access. On shared hosting, that turns one accou... KE Kenji Tanaka 15 Sep Cables plugged into the lit data ports of a network appliance — illustrating the traffic-facing interfaces this firewall flaw can be reached through. Cybersecurity 6 min A PAN-OS Flaw Gives Root on Palo Alto Hardware, and There Is No Workaround CVE-2026-0310 is reachable through a dataplane interface, not only the management plane, and Palo Alto lists n... KE Kenji Tanaka 15 Sep Two thick blue-bound volumes stacked on a white background — illustrating the volume of advisories a single month of patches now arrives as. Cybersecurity 6 min Microsoft Has Patched 2,760 Flaws This Year. The Old Record Was 1,139. Microsoft shipped 974 fixes in September, a monthly record. The year is the number that matters: 2,760 so far... KE Kenji Tanaka 14 Sep A row of coloured network cable connectors standing upright on a white background — illustrating the gateway hardware these VPN flaws sit in. Cybersecurity 6 min The Dutch Warned About Check Point's VPN Flaws Before Anyone Exploited Them Two pre-authentication flaws in Check Point VPN were patched on 9 September. Three days later the Dutch NCSC s... KE Kenji Tanaka 14 Sep A close-up of an audio mixing console, rows of faders receding into shadow Cyber Threat Intel 6 min CISA Added Five Exploited Flaws, All in Software That Manages Other Machines JFrog Artifactory builds your software, ConnectWise ScreenConnect reaches into your machines and MikroTik Rout... KE Kenji Tanaka 13 Sep A stack of bound official gazettes, edges frayed, spines stamped with dates Developer Tools 6 min GitLab Patched a 10.0 File-Read Flaw. Probes Appeared the Next Day. An unauthenticated attacker could read any file on a self-managed server. What sits on that server is every cr... MA Maya Lin 12 Sep Bar chart: twelve KEV entries in the last seven days, eleven in the seven before that, eleven across the fortnight before that Cyber Threat Intel 5 min CISA Has Logged 37 Newly Exploited Flaws in 30 Days CISA's exploited-vulnerability catalogue has taken 37 new entries in 30 days, including this week's Citrix Net... KE Kenji Tanaka 11 Sep A red emergency call point mounted on a plain wall, its pictogram showing a hand pressing the central button. Cybersecurity 6 min N-able's Fourth N-central Hotfix in Five Weeks, and Hotfix 3 Does Not Cover It CVE-2026-86218 is a pre-auth RCE at CVSS 10.0, already exploited. The customer notice calls it a zero-day obse... KE Kenji Tanaka 8 Sep Three mechanical stopwatches on a reflective black surface, each stopped at a different reading on its dial Cybersecurity 6 min CISA Added Seven Exploited Flaws. Five Due in Three Days, Two in Fourteen. Five carry a three-day federal clock, two carry fourteen days, in a single batch. Three of the seven sit in AI... PR Priya Nair 4 Sep A rack-mounted network chassis with its alarm panel lit, critical and major indicators glowing amber, and bundled yellow fibre patch cables running across the front Cybersecurity 6 min SonicWall SMA1000's July Fix Is the Build This Advisory Now Calls Vulnerable Two new zero-days are being chained on SMA1000 appliances, in the same two components as the June pair. The Ju... KE Kenji Tanaka 3 Sep A close-up of stacked network switch ports with green link lights, receding out of focus Cybersecurity 7 min PaperCut's First Emergency Patch Was Bypassable. Here Is the Second One. PaperCut has shipped a second emergency patch after researchers walked around the first. A vendor under active... PR Priya Nair 1 Sep Two towering stacks of labelled paper files with handwritten date tabs on their edges — illustrative of a monthly patch load large enough to be counted three different ways. Cybersecurity 7 min Microsoft Fixed 421 Flaws. Or 400. Only One Is Being Exploited. Three different totals are circulating for the same Patch Tuesday, and all are defensible. The one number that... CY Cyber Team 12 Aug Rows of numbered ports on a fibre patch panel, green connectors threaded with yellow leads — illustrative of the networked estate a three-day patch deadline has to cover. Cybersecurity 7 min Three Days to Patch. CISA's Deadline Used to Be Three Weeks. Every vulnerability CISA catalogued in the first week of August carried a three-day federal deadline. We measu... KE Kenji Tanaka 11 Aug Macro view of a processor die on a circuit board, illustrating the branch-prediction hardware this attack targets. Cybersecurity 7 min MIT Broke Spectre v2 Defences. AMD Will Patch, Intel Will Not. MIT researchers showed that Spectre v2 mitigations can be stepped around on current Intel and AMD processors,... CY Cyber Team 9 Aug Rack-mounted servers in a data centre aisle, illustrating the managed estates an MSP console reaches. Cybersecurity 8 min N-able's Patch Did Not Hold. The Second Hotfix Came Four Days Later. N-able patched a critical authentication bypass in N-central, attackers found a path the patch did not block,... CY Cyber Team 8 Aug A black alarm clock on a desk beside a laptop, showing a few minutes to twelve. Cybersecurity 8 min Three Days to Patch N-able. A Year Ago 92% of KEV Entries Got Three Weeks CISA gave three days to fix an actively exploited N-able bypass. Across the catalogue, the three-week remediat... CY Cyber Team 5 Aug From below of monitor of modern computer with opened files on blue screen Cybersecurity 6 min Joomla JCE Flaw CVE-2026-48907 (CVSS 10.0) Is Being Actively Exploited — Patch and Check for Compromise CISA added CVE-2026-48907, a maximum-severity flaw in the Widget Factory Joomla Content Editor extension (JCE... CY Cyber Team 19 Jun A darkened computer screen filled with code, representing a ransomware attack. Cybersecurity 6 min Palo Alto GlobalProtect Flaw CVE-2026-0257 Is Under Active Exploitation — Patch or Mitigate Now Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication-bypass flaw in PAN-OS... CY Cyber Team 19 Jun Microsoft Exchange Server OWA zero-day CVE-2026-42897 actively exploited vulnerability alert Cybersecurity 8 min Microsoft Exchange OWA Zero-Day CVE-2026-42897 Actively Exploited With No Permanent Patch Microsoft confirmed active exploitation of CVE-2026-42897, an XSS flaw in Exchange's Outlook Web Access, on 14... CY Cyber Team 2 Jun CERT-In blueprint document cover showing 12-hour patching directive against AI-assisted cyberattacks on digital infrastructure Cybersecurity 9 min CERT-In Urges 12-Hour Patching Window as AI Shrinks Exploit Timelines to Hours India's CERT-In has told organisations to patch, mitigate or isolate known-exploited flaws on internet-facing... KE Kenji Tanaka 2 Jun Dark screen of system code and a terminal, illustrating software vulnerabilities being patched. Cybersecurity 3 min Bugs to Patch Now: A Critical OTRS Flaw and a Linux Root Hole on CISA's List A short, practical read of two urgent vulnerabilities: a critical pre-authentication flaw in the OTRS service... CY Cyber Team 2 Jun
Advertisement