42
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited
60
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0
60
30
60
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.
Manifold Security disclosed eight flaws across seven command-line AI coding agents where a repository's Git core.fsmonitor configuration causes agent-spawned commands to execute attacker code outside the sandbox and without approval prompts. Fixes shipped for goose (CVE-2026-72718, CVSS 4.0 score 7.0), Claude Code on one path, and Cursor, while Hermes Agent, Qwen Code, Grok Build, and a second Claude Code path were still unpatched as of September 1. OpenAI issued three CVEs for the same class in Codex, including CVE-2026-19592, and prior related bugs include CVE-2021-43891 in Visual Studio Code and CVE-2022-24346 in JetBrains IDEs. Exploitation requires the repository to arrive with its .git directory intact, such as via archives, shared drives, or USB sticks rather than an ordinary clone.
68
60
42
42
55
42
30
55
SolarWinds Web Help Desk Exploited for RCE in Multi
60
47
60
Microsoft Patch Tuesday, September 2026 Security Update Review
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.
74
42
30
60
30
60
Microsoft Patch Tuesday for October 2022 doesn't fix Exchange Server flaws
60
Microsoft and Other Major Software Firms Release February 2022 Patch Updates
60
Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero
60
60
Update Your Windows Computers to Patch 6 New In-the-Wild Zero
60
Microsoft June 2021 Patch Tuesday addresses 6 0days actively exploited
60
30
60
Microsoft Patch Tuesday — February 2019 Update Fixes 77 Flaws
60
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
60
Microsoft Patch Tuesday for May 2021 fix 4 critical flaws
60
Microsoft Patch Tuesday security updates for November 2024 fix two actively exploited zero
60
Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities
60
60
ToolShell: a story of five vulnerabilities in Microsoft SharePoint
60
47
Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms
60