Microsoft: Windows Server 2022 reached end of mainstream support
Windows Server 2022 left mainstream support on October 13, 2026, with security updates until October 2031.
3
Stories per day · 30 days
10 RSS
Relatedai-threats1burnout1chainguard1end-of-support1microsoft1survey1vulnerability-management1windows-server-20221windows-server-20251
133 stories, newest first · one card per story
Stories tagged #patching
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
Chainguard survey finds billion-dollar firms twice as likely to leave critical flaws unpatched.
2
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Citrix urges immediate patching of critical NetScaler ADC/Gateway memory-overflow flaw CVE-2026-107406 (CVSS 9.5) enabling RCE; no known exploits yet.
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat say Lightwell fixed more than 400 previously unknown Java library flaws without naming them.
4
FBI Drops Accenture Contractor After Sensitive Data Breach
FBI removed an Accenture contractor after an unpatched Oracle PeopleSoft flaw exposed personal data of thousands of employees.
How to fix a bug in a fix
Google Project Zero outlines emergency patching methods that let vendors fix urgent vulnerabilities faster than normal updates.
6
Re: cloud computing provider disclosures
An oss-security reply says cloud providers' early fix access shortens disclosure windows and catches pre-release bugs.
Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940
Microsoft issued a revised September 2026 Exchange Server update (V2) adding a fix for CVE-2026-96940 across Exchange SE, 2019, and 2016.
3
OpenSSL security advisory (AV26-980)
Canadian Cyber Centre advisory AV26-980 lists multiple vulnerable OpenSSL branches and urges administrators to apply updates promptly.
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks
CISA's 2026 election security plan flags slow patching, voter-database attacks, and insider risk.
1
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
GBHackers weekly roundup covers 50 stories including active Check Point, Cisco ISE and FortiGate attacks, Chrome 153 and iOS 27 patches, and AI-enabled threats.
2
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI-assisted bug hunting drives record vulnerability disclosures, with 66,401 CVEs logged in 2026 so far, nearly double last year's pace, straining defenders and open-source maintainers.
6
Grafana security advisory (AV26-936)
Canada's Cyber Centre warns Grafana OSS versions 12.3.0 through 13.2.1 are affected by a Geomap MapLibre XSS vulnerability; administrators should apply updates.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Linux kernel flaw CVE-2025-39682 to its KEV catalog, requiring federal agencies to prioritize remediation under BOD 26-04.
1
New Check Point flaw lets hackers execute code with root privileges
Check Point patched CVE-2026-91843, a stack-based buffer overflow in Security Management Server logins enabling unauthenticated root remote code execution.
3
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Check Point fixes critical unauthenticated RCE CVE-2026-91843 in Security Management; Tanium and Kaspersky also patch product vulnerabilities.
2
WordPress 7.1.1 Maintenance and Security Release
WordPress 7.1.1 ships 11 security fixes including unauthenticated stored XSS in wpautop(), path traversal, and theme installation flaws; update immediately.
Tanium security advisory (AV26-935)
Canadian Cyber Centre warns Tanium Threat Response versions before specified updates are affected by vulnerability TAN-2026-047; users should patch.
Dell security advisory (AV26-934)
Canadian Cyber Centre relays Dell advisories covering vulnerabilities in Networking OS10, OpenManage Server Administrator, ECS, ObjectScale, DUP, Wyse Management Suite, and Repository Manager.
Everybody's Lost Their Minds
A veteran security engineer argues AI-driven vulnerability discovery is not making organizations safer because patching and basic security hygiene remain the real bottleneck.
1
AL26-021 - Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460
Canada's Cyber Centre alerts on three actively exploited Cisco ISE/ISE-PIC vulnerabilities enabling unauthenticated administrative access and data tampering.
3
Cisco security advisory (AV26-932)
Cisco September 2026 updates fix flaws in ASA, FTD, FMC, ISE, and Nexus Dashboard; CISA added actively exploited CVE-2026-76460 to KEV.
Windows 11 24H2 Home and Pro reach end of support in October
Microsoft ends security updates for Windows 11 24H2 Home and Pro on October 13, 2026, urging users to upgrade to Windows 11 25H2.
2
BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks
ISC released BIND 9.20.29 patching 14 flaws, including two DNSSEC validation bypasses enabling cache poisoning and multiple denial-of-service bugs.
7