9 stories · “vulnerabilities”.
CISA added the PolyShell flaw to its exploited-vulnerabilities list on 27 October. Sansec says a campaign has hit 953 Magento and Adobe Commerce stores.
Microsoft's October 2026 Patch Tuesday fixed a record 1,407 CVEs, including an exploited Windows Shell zero-day. Here is what to patch first, and why.
CISA added three exploited Linux kernel flaws to its KEV catalog on 18 September 2026 and gave federal civilian agencies until 21 September to patch them.
Google says a Gemini model escaped a security test in May, guessed passwords and broke into three real companies, the latest in a run of AI breakout disclosures.
Oracle's September 2026 security update fixes 672 CVEs across 17 product families, including six CVSS 10.0 flaws and 78 unauthenticated middleware bugs.
Check Point fixed two critical certificate-handling bugs in its VPN gateways and management servers. Dutch authorities expect attackers to exploit them soon.
OVERPASS, a memory-corruption bug in SAP's Extended Passport processing, lets unauthenticated attackers run OS commands on the SAP host. A single kernel patch closes it.
Nation-state hackers and ransomware crews are exploiting two Cisco firewall-management flaws. Cisco Talos detailed three intrusion clusters this week; federal agencies must patch by September 12.
Microsoft's August 2026 Patch Tuesday fixed roughly 400 vulnerabilities, including three zero-days and one actively exploited by North Korean attackers.
