Technology ❯ Cybersecurity ❯ Vulnerability Management

Patch Management

Security Updates Patch Tuesday Plugin Updates Qualys Webinar Series CVE-2026-15409 Reporting Transparency Apple iOS Updates Automated Security Fixes Android Patch Levels CVE-2026-47729

3 ARTICLES

last wk.

Elementor CSRF Flaw Lets One-Click Links Create Administrator Accounts

A buggy Editor Events check bypassed WordPress REST nonce validation, leaving sites that have not upgraded to Elementor 4.3.2 open to one-click admin account creation.

5 ARTICLES

2mo ago

Researcher Releases 'MiniPlasma' Exploit That Gains SYSTEM Access on Fully Patched Windows

3 ARTICLES

4mo ago

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

3 ARTICLES

5mo ago

Marimo RCE Exploited Within Hours of Disclosure

11 ARTICLES

9mo ago

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

7 ARTICLES

last yr.

Apple Plans Silent ‘Background Security Improvements’ in iOS 26.1 to Replace Rapid Security Responses

5 ARTICLES

last yr.

Google Project Zero Launches Weekly Early Vulnerability Alerts

4 ARTICLES

last yr.

Firefox and Chrome Patch Critical Sandbox Escape Vulnerabilities

3 ARTICLES

last yr.

Palo Alto Networks Firewall Vulnerabilities Under Active Exploitation

5 ARTICLES

2y ago

Microsoft's September 2024 Patch Tuesday Addresses Four Zero-Days and 79 Flaws

Patch Management

Elementor CSRF Flaw Lets One-Click Links Create Administrator Accounts

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

Squidbleed Lets Shared Squid Proxies Leak Other Users' HTTP Requests

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Mythos Can Turn Published Patches Into Working Exploits in Hours

Researcher Releases 'MiniPlasma' Exploit That Gains SYSTEM Access on Fully Patched Windows

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

Marimo RCE Exploited Within Hours of Disclosure

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

Apple Plans Silent ‘Background Security Improvements’ in iOS 26.1 to Replace Rapid Security Responses

Google Project Zero Launches Weekly Early Vulnerability Alerts

Firefox and Chrome Patch Critical Sandbox Escape Vulnerabilities

Palo Alto Networks Firewall Vulnerabilities Under Active Exploitation

Microsoft's September 2024 Patch Tuesday Addresses Four Zero-Days and 79 Flaws