Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modules
60
Week in review: Patch Tuesday forecast, 9 free ransomware guides, Cybertech Europe 2023
60
60
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited
60
Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited
60
Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed
60
Week in review: Microsoft patches actively exploited 0-days, Amazon and HSBC employee data leaked
60
Week in review: Microsoft patches zero-day, Apple security updates, HashiCorp Vault vulnerability
60
60
60
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience
60
Week in review: Microsoft, Apple patch exploited zero-days, tips for getting hired in cybersecurity
60
Microsoft Patch Tuesday, September 2026 Security Update Review
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.
74
Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited
60
60
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
Help Net Security's weekly digest highlights 274 compromised Zimbra servers, Gitea and Citrix NetScaler KEV additions, a PaperCut zero-day, and a suspected Iran-linked power plant attack.
The roundup reports at least 274 internet-facing Zimbra instances compromised via CVE-2026-73570, critical Gitea CVE-2026-60004 added to CISA's KEV catalog after exploitation began, and previously patched Citrix NetScaler flaw CVE-2026-8452 exploited in the wild. It also covers PaperCut NG/MF zero-day attacks, a suspected Iran-linked shutdown of a UK power plant, an FBI seizure of domains tied to a China-linked group that hit NASA, DOJ and the Senate, a cyberattack disrupting Boston Scientific, and the Manchester Airports Group breach. Additional items include Chameleon SEO poisoning phishing, Android car head unit proxy botnet malware, ReliaQuest social engineering by ShinyHunters, fake OpenAI Codex macOS malware, and AI-related workforce and supply chain interviews.
25
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More
60
60
Patch Tuesday, November 2020 Edition
60
Week in review: F5 data breach, Microsoft patches three actively exploited zero-days
60
60
Week in review: Windows zero-day exploited, Patch Tuesday forecast, selecting a compliance solution
60
60
60
Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug
60
60
60
60
60
60
60
60
60
60
60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast
60
Week in review: Cisco fixes critical UCCX flaws, November 2025 Patch Tuesday forecast
60
Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited Chrome
60
Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast
60
Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days
60