The alarming gap between vulnerability discovery and exploitation is growing: a staggering 35,853 CVEs were published in the first half of 2026, with a whopping 49% surge from the previous year. Meanwhile, only a tiny fraction - 495 - were actually exploited in the wild.
If you've installed the latest security updates, you may be experiencing frustrating disruptions to your Remote Desktop Services on Windows Server, including failed connections, sign-in issues, and server freezes. Microsoft has confirmed the issue affects Windows Server 2012 and later, as well as Windows 10 and Windows 11 devices.
If you've installed the latest Windows security updates, you might be experiencing audio issues with your USB devices - Microsoft has confirmed that two updates can cause USB audio devices to fail on some Windows 11 systems. The problem specifically affects devices using USB Audio Class 1.0.
The notion that security through obscurity can keep us safe is rapidly becoming obsolete, as AI agents are now uncovering obscure vulnerabilities in codebases that were thought to be battle-tested. Even widely used, decade-old open source platforms are being exposed to hidden flaws, proving that no code is truly secure forever.
GitLab is urging users to upgrade immediately to patch a critical path traversal flaw, CVE-2026-85706, that could expose sensitive files to unauthenticated attackers. This maximum-severity vulnerability requires prompt action to protect self-managed GitLab installations.
Microsoft has fixed a frustrating issue that prevented Microsoft Teams and Outlook from launching on ARM-based Windows PCs, such as Surface Pro 11 and Surface Laptop 7, after installing certain security updates. The problem, affecting devices running Windows 11 24H2 or later, has been resolved with the latest patch.
Windows admins are in a panic as September's Patch Tuesday updates cause Remote Desktop Services to go dark on production servers, forcing hard resets to get things back online. Reports are flooding in of RDS failures just hours after installation, with symptoms including stuck sessions, refused connections, and frustrating error messages.
Microsoft's latest security update, KB5002914, has caused frustration for some Excel users, disrupting basic workflows like copy-and-paste and autofill. The update, part of September's Patch Tuesday, has left many users, including entire teams, scrambling to find workarounds.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Meet the AI super sleuths that can uncover software vulnerabilities with just a whisper of a rumor. With minimal input, these agents can sniff out working exploits, potentially beating the patch cycle and leaving security teams scrambling to keep up.
Google just patched 200 security flaws in Android, including a critical Wi-Fi vulnerability that could let hackers take control of your device - and it's a stark reminder to stay vigilant about the risks lurking in ordinary access and trusted services.
Check Point has uncovered two critical vulnerabilities in VPN certificates that could let hackers run code remotely without authentication, posing a huge threat to security. The flaws, with a near-perfect CVSS score of 9.8, affect various Check Point products, including Security Gateways, Security Management Server, and Spark Firewall.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on three critical vulnerabilities in Cisco, Citrix, and Fortinet products, adding them to its list of Known Exploited Vulnerabilities - and federal agencies have just until September 12, 2026 to patch up. These flaws, including a severe CVE-2026-20079 with a CVSS score of 10.0, could leave systems exposed to serious threats if not addressed.
Good news for Windows 11 users: Microsoft has squashed a frustrating bug that reset customized mouse settings, and the fix is now available through the latest security updates. Installing the latest update will not only resolve this issue but also bring important improvements and fixes to your device.
Microsoft has squashed a frustrating bug that prevented Windows desktop settings from loading, leaving users with a dull black background - but thankfully, the fix is now in place! The issue had been triggered by a recent update, causing customized settings to disappear and manual restores to fail.
Thousands of Skullcandy earbud owners may be vulnerable to Bluetooth hijacking due to a high-severity flaw in the Airoha Bluetooth Audio SDK - leaving them with a tough decision: risk compromised hardware or toss their earbuds.
Microsoft just dropped a massive patch bundle, fixing a record-breaking 974 security holes in one fell swoop - more than doubling its previous year's total with three months still to go. This huge update eclipses the company's previous record of 570 vulnerabilities set just two months ago.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
A critical flaw in Alby Hub, a self-hosted Lightning wallet, has been discovered, putting internet-facing Bitcoin wallets at risk of takeover and fund loss, with one user already affected. To avoid vulnerability, users are urged to update to version 1.24.0 or later.
SAP has patched a critical kernel flaw, dubbed OVERPASS, that allowed hackers to remotely take control of affected systems without any authentication, running malicious commands with ease. This maximum-severity vulnerability, rated 10.0 on the CVSS scale, was discovered by SAP security experts and has been fixed with a patch.
A critical cPanel security flaw, known as CVE-2026-67401, allows hackers with mail-related privileges to create files on a server and execute code as the root user, putting your entire system at risk. This vulnerability affects every supported version of cPanel and WHM, making it crucial to take immediate action.
This September Patch Tuesday release is a doozy, with a record 974 CVEs fixed - a staggering number that more than doubles the previous record and demands immediate attention from IT and security teams. The challenge is clear: prioritize and patch with lightning speed to stay ahead of potential threats.
A critical vulnerability, known as CVE-2026-44756, has been discovered in SAP's Extended Passport Processing, allowing attackers to corrupt memory and wreak havoc on systems. This maximum-severity flaw stems from a simple yet devastating oversight: missing boundary validation during data deserialization.
Microsoft just dropped a massive Patch Tuesday update, fixing a record-breaking 974 vulnerabilities - including two Windows zero-days that have already been exploited by hackers. This critical update covers a wide range of products, from Windows and Office to SQL Server and Developer Tools.
The conventional cyber defense approach is no match for modern threats, as attackers often exploit valid credentials, misconfigurations, and low-severity weaknesses to bypass months of patching efforts. A new offense-driven mindset, like CISA's BOD 26-04, is shifting the focus from patch lists to exploitability to better address real-time risk.
Microsoft just dropped a record 974 patches, including fixes for two vulnerabilities already being exploited as zero-days, forcing companies to scramble to keep up. This massive update is a stark reminder to stay vigilant, with experts warning of a vulnerability apocalypse.