The flaws, the patches and the race between them.
An article joins this feed when it matches these terms. Each one is also a search of its own.
How to triage a batch of confirmed-exploited vulnerabilities, using the September 2026 KEV update as a worked example. Tagged with vulnerabilitymanagement, cisakev, triage. #reading-a-kev-batch-turning-seven-exploited-vulnerabilities-into-a-72hour-action-list Reading a KEV batch: turning seven exploited vulnerabilities into a 72-hour action list On 2 September 2026, the…
Palo Alto Networks shipped a cluster of advisories in mid-October 2026, and CERT-FR bundled them into advisory CERTFR-2026-AVI-1326. Reading the batch as one event hides the differences that matter for triage. The batch at a glance CVE-2026-0311 and CVE-2026-0312 land…
CVE-2026-0321 affects PAN-OS dataplanes and explicitly leaves Cloud NGFW and Panorama untouched. That sentence is accurate, and it is also the kind of sentence that quietly derails a patch programme. The scope as published The CVE Record published 14 October 2026 describes…
We posted regular status updates during our investigation yesterday reflecting the scenario to the best of our knowledge as the investigation proceeded. The investigation was ongoing, and some assumptions and beliefs in those updates were later proven to be inaccurate…
"The update is complete." Can you truly feel secure with just those words? AI is discovering vulnerabilities that have been overlooked for years, and attackers are using AI to hunt for weaknesses. That era has already begun. What I want…
I heard there is a critical vulnerability in PHP, but does it affect my company's website? For companies using WordPress or operating web-based ordering or membership management systems, PHP vulnerabilities are a topic that requires verification. A vulnerability refers to…
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working…
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted…
How to read 4,802, 985 and 0 from the same advisory set, and why a zero match is a visibility limit rather than a deployment finding. Tagged with zoomeye, snort3, cisco, exposuremeasurement. #4802-firepower-fingerprints-985-ios-xe-and-zero-cyber-vision-reading-three-snort-3-numbers-together 4,802 Firepower fingerprints, 985 IOS XE and zero Cyber Vision: reading…