GitHub's Internal Repositories Compromised Through Malicious VS Code Extension
PremiumPoisoned VS Code extension led to internal repo access; reinforces dev-tool supply-chain risk.
Friday, May 22
Monday, May 18
Microsoft's May 2026 Patch Tuesday Addresses 120 Vulnerabilities Across Critical Systems
PremiumMicrosoft released a broad May 2026 Patch Tuesday covering 120 vulnerabilities across Windows, Azure, and Office, including 29 critical RCE flaws. Patch management is essential to reduce exposure.
Urgent Mitigations Released for Microsoft Exchange Zero-Day Vulnerability
PremiumMicrosoft issues mitigations for a high-severity Exchange Server zero-day (CVE-2026-42897) exploited in the wild. Install mitigations promptly.
Friday, May 15
Microsoft Releases Critical Security Patches for 138 Vulnerabilities
PremiumMass patch Tuesday covering DNS, Netlogon, and privilege-escalation flaws; prioritize critical patches in risk mitigations.
Cyberattackers Exploit Microsoft Teams to Breach Corporate Networks
PremiumInitial access via social engineering on Teams; rapid persistence emphasis for defenders to harden collaboration tools and training.
Monday, May 11
Friday, May 1
Wednesday, April 29
Monday, April 27
Friday, April 24
Wednesday, April 22
Monday, April 20
Friday, April 17
Wednesday, April 15
Microsoft's April 2026 Patch Tuesday Tackles Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Microsoft's April 2026 Patch Tuesday Fixes Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Monday, April 13
Google's Chrome 146 Update Enhances Security with Device-Bound Session Credentials
PremiumDevice-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Urgent Patch Released for Long-Exploited Adobe Reader Vulnerability
PremiumAdobe patched a Reader zero-day (CV E-2026-34621) after it was exploited in the wild for months; keep systems updated.
Google Enhances Chrome Security with Device-Bound Session Credentials
PremiumDevice-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Adobe Addresses Critical Zero-Day in Reader Exploited for Months
PremiumAdobe patched a Reader zero-day (CV E-2026-34621) after it was exploited in the wild for months; keep systems updated.
Google Enhances Chrome Security with Device-Bound Session Credentials
PremiumDevice-Bound Session Credentials (DBSC) became generally available for Chrome on Windows to prevent session hijacking. Update Chrome.
Get these articles delivered to your inbox.
Subscribe free