Microsoft Releases Critical Security Patches for 138 Vulnerabilities
PremiumMass patch Tuesday covering DNS, Netlogon, and privilege-escalation flaws; prioritize critical patches in risk mitigations.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesFriday, May 15
Monday, May 11
Critical Zero-Day Vulnerability in Linux Threatens System Security
PremiumDirty Frag zero-day enables root via PoC exploits across many distros; patch guidance issued.
Ivanti Releases Critical Patch for Exploited Zero-Day Vulnerability
PremiumCVE-2026-6973 exploited in targeted attacks; patches released to mitigate. Immediate patching recommended.
Microsoft Addresses Critical Vulnerabilities in 365 Copilot Services
PremiumThree critical disclosures in Microsoft 365 Copilot and Copilot Chat were remediated; end-user action not required per advisories.
Friday, May 8
Critical Vulnerabilities Found in Ivanti EPMM Demand Immediate Patching
PremiumIvanti Endpoint Manager Mobile 0-day vulnerabilities are being exploited; patch on-premises deployments immediately.
Urgent Patch Required for PAN-OS Zero-Day Vulnerability Actively Exploited
PremiumPan-OS users face an actively exploited zero-day; apply patches urgently to mitigate potential RCE and persistence risk.
Chrome 148 Security Update Delivers Critical Vulnerability Fixes
PremiumChrome 148 closes 127 vulnerabilities, including critical overflow and use-after-free flaws. Update immediately to reduce exploitation risk.
Wednesday, May 6
Critical cPanel Flaw Exploited Against Government Networks
New cPanel vulnerability exploited to target government and MSP networks. Patch immediately and audit exposure.
Critical Vulnerability in Weaver E-cology Exploited by Cybercriminals
Critical unauthenticated RCE in Weaver E-cology is being actively abused in the wild. Organizations should patch affected builds and monitor for payloads.
Critical Security Flaws in MOVEit Automation Demand Immediate Attention
Progress Software patches a critical MOVEit Automation flaw that could bypass authentication. Immediate action recommended to apply updates.
Monday, May 4
Exim Mail Server Update Resolves Critical Security Vulnerabilities
PremiumExim fixes address memory corruption, crash and data leakage risks across widely used mail servers.
Critical Exploit in cPanel & WHM Threatens Thousands of Servers
PremiumTechnical PoC publicly released for CVE-2026-41940; vast exploitation activity observed in wild, enabling pre-authentication access and server compromise.
Friday, May 1
Windows 11 Update Disrupts Third-Party Backup Software
PremiumApril 2026 Windows 11 update breaks third-party backup software; assess vendor patches and rollback options to avoid data loss.
Critical Flaw in Google Gemini CLI Poses Severe Security Risks
PremiumA maximum severity remote code execution flaw in the Gemini CLI and related GitHub Actions could allow attackers to run code on host systems. Apply patches immediately.
Critical Vulnerability in cPanel & WHM Exploited for Months
PremiumActive exploitation of a critical auth bypass in cPanel/WHM has been observed in the wild for months, enabling unauthorized admin access. Patch and containment efforts are underway.
Wednesday, April 29
Critical GitHub RCE Vulnerability Exposed by AI-Aided Research
RCE in GitHub's internal git infra could allow full server compromise; authenticated access required.
Critical SQL Injection Vulnerability in LiteLLM Exposes Cloud Credentials
Critical pre-auth SQL injection in LiteLLM openly exploited in the wild, exposing cloud credentials.
VECT 2.0 Ransomware Misleads as Destructive Data Wiper
VECT 2.0 acts more as a data wiper due to encryption nonce flaws; recovery unlikely even for attackers.
Microsoft Secures Entra ID Against Privilege Escalation Threat
Flawed Entra ID role could enable privilege escalation; Microsoft issued patches after discovery by researchers.
Monday, April 27
Get these articles delivered to your inbox.
Subscribe free