Tag: patch management
316 articles
Drupal Patches Code Flaws, Warns of Imminent Exploits
The Drupal Security Team is warning site owners to update their core software ASAP, as two critical vulnerabilities have been discovered that could lead to remote code execution - and exploits could be developed within hours or days. Get ready to patch up: CVE-2026-108097 and CVE-2026-108099 need urgent attention to prevent attacks.
Drupal Fixes Core RCE Flaw with No-Login Path via Contributed Modules
A critical remote code execution flaw in Drupal's core Field UI module, tracked as CVE-2026-108097, has been patched, but the fix only helps sites that don't rely on contributed modules or custom code to stay safe. Over 151,000 Drupal sites are still vulnerable, highlighting the urgent need for an upgrade.
Microsoft Fixes Windows Bug Behind Black Screens, Explorer Crashes
Microsoft has squashed a pesky Windows bug that caused black screens and Explorer crashes, and it's already included the fix in updates released since October 13, 2026 - so be sure to get the latest update to keep your device running smoothly!
Large Firms Expose Themselves to Cyber Risk by Leaving Vulnerabilities Unpatched
Large companies are leaving themselves exposed to cyber risk by neglecting to patch high or critical vulnerabilities, with 66% of security leaders at firms with over $1bn in revenue admitting to doing so at least sometimes. This stark contrast with smaller firms highlights a troubling trend in cyber risk management.
Microsoft Discloses Over 1,400 Security Flaws in Record Patch Update
Microsoft just dropped a record-breaking patch update, fixing over 1,400 security vulnerabilities in Windows and other software - that's roughly ten times its usual monthly output! This massive update surpasses the previous record, and brings the year's total discovered vulnerabilities to over 4,000.
Microsoft Winds Down Support for Windows 11 24H2 Editions
Microsoft just announced that Windows 11 24H2 Home and Pro editions, along with Windows 10 Enterprise LTSB 2016, have reached their end of support, meaning they won't receive any further security or non-security updates after October 2026. It's time to consider upgrading to stay protected!
MarkLogic Flaws Empower Delegated Managers to Gain Admin Control
Progress is urging users to upgrade MarkLogic Server ASAP, as a recent spate of vulnerabilities - including 31 flaws disclosed just last month, five of which are critical - could leave delegated managers with admin control and users stripped of previous privileges. A second round of security patches has been released in response, with fixes available since September 10.
Patch Tuesday Stress Drives CISOs to Avoid Work
Patch Tuesday stress is taking a toll on cybersecurity leaders, with one in five admitting they've called in sick or booked holiday time to avoid the monthly chaos. The pressure is real, with 41% working overtime and 37% burning the midnight oil to deploy patches.
VMware Unveils HyperArmor to Streamline Patch Management
VMware is giving customers some much-needed breathing room with its new monthly update schedule, made possible by AI-powered defect detection that uncovered a surge of issues. This change aims to balance speedy patching with the time customers need to test and validate fixes.
TeamViewer Warns Users to Patch Flaws Amid Remote Code Execution Risk
TeamViewer is urging users to update to the latest version immediately due to a critical security risk that could allow hackers to take control of your device. A high-severity flaw, CVE-2026-92370, and four others have been identified, highlighting the urgent need for an update to protect against remote code execution attacks.
Apple fixes exploited CoreGraphics zero-day in urgent patch rollout
Apple just dropped an urgent patch to fix a CoreGraphics zero-day vulnerability that's been exploited in targeted attacks - it's crucial to update your devices ASAP to stay protected. This swift fix comes after the flaw was used to launch attacks before a public fix was available.
Citrix Rushes Patches for Exploited NetScaler Zero-Days
Citrix has rushed out patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, which were being actively exploited by hackers, with a severity rating of 9.5 on the CVSS scale. The patches fix command-injection flaws that allowed remote code execution, and were released just days after researchers warned of the threats.
Citrix Warns of Critical Vulnerabilities Under Active Attack
Critical vulnerabilities in Citrix NetScaler appliances are under active attack globally, and the Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to patch quickly despite the potential complexity of the update process.
Citrix NetScaler Zero-Days Exploited in Wild Ahead of Patches
Citrix administrators were abruptly warned to shut down their NetScaler appliances amid reports of zero-day exploits being used in the wild, with private alerts circulating before patches were available. The sudden shutdowns followed discreet notifications from IT suppliers, security teams, and law enforcement, leaving many scrambling for answers.
Hackers Exploit WordPress Flaw for Remote Code Execution
Less than five hours after WordPress released a patch for a critical vulnerability, hackers began exploiting the flaw, known as CVE-2026-87902, to execute remote code. This lightning-fast attack highlights the importance of swift updates to protect your site.
CISA Warns of Active Exploits in Zyxel Switch Vulnerability
A high-severity vulnerability in Zyxel GS1900 series switches is under active attack, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to issue a directive for federal agencies to patch the flaw and prevent data theft. This urgent warning highlights the vulnerability's potential impact on enterprise and agency environments.
Microsoft Sets End Date for Windows 11 24H2 Support
Mark your calendars: Windows 11 24H2 Home and Pro editions will stop receiving crucial security and non-security updates after October 13, 2026, leaving devices vulnerable to the latest threats.
Apple Discloses Record 260 Vulnerabilities in Massive Patch Cycle
Apple just dropped a massive patch cycle, tackling a record-breaking 260+ vulnerabilities across its operating systems, browsers, and software products - the largest update of its kind in the company's history. This critical update includes fixes for 122 security issues in iOS 27 and 204 in macOS 27 Golden Gate.
Microsoft Patching Accelerates Amid AI-Driven Vulnerability Surge
Microsoft just dropped a massive September patch, fixing a record-breaking 972 vulnerabilities, including 112 critical ones that could put your system at risk. This huge update is part of a rapid acceleration in patch releases, fueled by AI-powered vulnerability detection that's uncovering more threats than ever.
GitLab Flaw Draws Widespread Probes Ahead of Patch
GitLab has rushed out emergency patches for two severe flaws in its platform, warning users to upgrade ASAP to avoid potential exploitation. A particularly critical defect, CVE-2026-85706, has been assigned a maximum CVSS score of 10.0, sparking widespread concern.
Attackers Exploit JFrog Artifactory Bugs Despite Patches
Despite available patches, hackers have exploited three JFrog Artifactory vulnerabilities, highlighting the risks of slow patching and leaving internet-exposed instances open to attack. This exploitation has allowed attackers to gain administrative control, putting organizations at risk.
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws Ahead of Federal Patch Deadline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on three critical vulnerabilities in Cisco, Citrix, and Fortinet products, adding them to its list of Known Exploited Vulnerabilities - and federal agencies have just until September 12, 2026 to patch up. These flaws, including a severe CVE-2026-20079 with a CVSS score of 10.0, could leave systems exposed to serious threats if not addressed.
Microsoft Fixes Bug That Erased Windows Desktop Settings
Microsoft has squashed a frustrating bug that prevented Windows desktop settings from loading, leaving users with a dull black background - but thankfully, the fix is now in place! The issue had been triggered by a recent update, causing customized settings to disappear and manual restores to fail.
Microsoft Floods Patch Pipeline with 974 Security Fixes
Microsoft just dropped a massive patch bundle, fixing a record-breaking 974 security holes in one fell swoop - more than doubling its previous year's total with three months still to go. This huge update eclipses the company's previous record of 570 vulnerabilities set just two months ago.