← Back to home
PA

Patching & Updates Daily Hub

Windows Autopatch, hotpatch, Patch Tuesday and feature update management for IT engineers.

Updated daily · 18 August 2026 at 07:39 UTC
Visit official portal ↗

Latest Articles (127 today)

📰 Read the weekly newsletter →
Patching & Updates 17 August 2026
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. [...]
Read more →
Patching & Updates 17 August 2026
Pokémon Center data breach exposes customer info, cancels some orders
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party…
Read more →
Patching & Updates 17 August 2026
Microsoft confirms GitHub is down worldwide
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services. [...]
Read more →
Patching & Updates 17 August 2026
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier…
Read more →
Patching & Updates 17 August 2026
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extended support. [...]
Read more →
Patching & Updates 17 August 2026
Philips and GE investigating Clop ransomware data theft claims
Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breached their systems and stole data. [...]
Read more →
Patching & Updates 17 August 2026
French tax authority data breach affects 678,000 individuals
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000…
Read more →
Patching & Updates 17 August 2026
Microsoft working on Defender patch for ShieldBreak zero-day
Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414. [...]
Read more →
Patching & Updates 17 August 2026
Microsoft Publisher: Life or death?
ISSUE 23.33 • 2026-08-17 SOFTWARE By Will Fastie In October, Microsoft will throw the kill switch for Publisher 365, which will prevent Publisher from opening — and thereby orphan Publisher files. In…
Read more →
Patching & Updates 17 August 2026
Translation at home and abroad
TRAVELING TECH By Peter Deegan A good translation app on your phone is useful for travel abroad — and also locally in our diverse, globalized world. Both Apple and Google offer free translation apps…
Read more →
Patching & Updates 17 August 2026
VT Uploader — The power of VirusTotal from your desktop
FREEWARE SPOTLIGHT By Deanna McElveen • Comment about this article Before we get into today’s freeware, it might be helpful to talk about the service behind it. That service is VirusTotal. Even if…
Read more →
Patching & Updates 17 August 2026
Making Windows more responsive
PATCH WATCH By Susan Bradley Microsoft is setting expectations, or is it? The August updates begin the gradual rollout of the first of many promised changes to Windows 11. This would seem to be a…
Read more →
Patching & Updates 16 August 2026
SafePal data breach impacts 39,798 customers, stolen info for sale
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now…
Read more →
Patching & Updates 16 August 2026
Anthropic confirms Claude is down in major outage affecting multiple services
Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthropic services. [...]
Read more →
Patching & Updates 16 August 2026
Large-scale DDoS attacks disrupted Threema secure messaging service
Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications. [...]
Read more →
Patching & Updates 16 August 2026
New AmnesiaStealer macOS malware hijacks browser sessions via remote control
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim's…
Read more →
Patching & Updates 15 August 2026
New Evooo1Bot Linux botnet turns routers into traffic relay nodes
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]
Read more →
Patching & Updates 14 August 2026
How Anthropic plans to watermark Claude's AI-generated text
It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and other socials. [...]
Read more →
Patching & Updates 14 August 2026
Hackers arrested over €30M bank fraud exploiting service provider flaw
Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from…
Read more →
Patching & Updates 14 August 2026
Cyber pirates in our future
The White House announced a change in policy wanting private companies to help in hacking our adversaries. I’ve seen a few comments on it, such as Robert Graham’s take posted on Substack I’ve seen…
Read more →
Patching & Updates 14 August 2026
Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks
You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone." [...]
Read more →
Patching & Updates 13 August 2026
Ukraine shuts down 94 fraudulent call centers, seize millions in cash
Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank accounts. [...]
Read more →
Patching & Updates 13 August 2026
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt
An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. [...]
Read more →
Patching & Updates 13 August 2026
Hackers breach govt webmail while running parallel crypto fraud
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. [...]
Read more →
Patching & Updates 13 August 2026
Microsoft patches LegacyHive Windows zero-day vulnerability
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]
Read more →
Patching & Updates 13 August 2026
AI 'watermark removers' flood the web. Almost none can prove they work.
Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open source project with over 4,500 GitHub stars and paid AI detection…
Read more →
Patching & Updates 13 August 2026
Critical VMware vCenter RCE flaw exploited for reverse SSH access
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access.…
Read more →
Patching & Updates 13 August 2026
Trezor discloses data breach affecting nearly 14,000 customers
Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping and logistics provider, was hacked [...]
Read more →
Patching & Updates 13 August 2026
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages…
Read more →
Patching & Updates 13 August 2026
White House taps security firms for offensive hack-back operations
A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a program that would allow private security companies to apply for approval…
Read more →
Patching & Updates 13 August 2026
WhatsApp rolls out new feature that flags potential scam messages
WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn users when scammers are targeting them. [...]
Read more →
Patching & Updates 13 August 2026
Master patch list for August 2026
I’ve updated the master patch list here. Please note I am not recommending installing updates at this time, we are just testing and reporting. I’ll be updating that page and monitoring for issues.…
Read more →
Patching & Updates 13 August 2026
Should I reboot?
Reminder – we are still in pause mode. But for those that are in test mode I’ve noticed one thing. Some of you might get the .NET patch, it get installed and then the operating system is still…
Read more →
Patching & Updates 12 August 2026
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...]
Read more →
Patching & Updates 12 August 2026
Android malware combo takes out loans and relays victims' credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time. [...]
Read more →
Patching & Updates 12 August 2026
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]
Read more →
Patching & Updates 12 August 2026
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.…
Read more →
Patching & Updates 11 August 2026
August 2026 Security updates
Once again it’s time to pause, ensure we have our backups and review what has been released. Even if you no longer use Windows use a time of the month to review your browser updates, your operating…
Read more →
Patching & Updates 10 August 2026
It’s a good time to find a deal on an AMD laptop
ISSUE 23.32 • 2026-08-10 SILICON By Matthew S. Smith If you, like me, became familiar with PCs in the late 1980s or 1990s, then you no doubt have the blue Intel Inside logo seared into your brain.…
Read more →
Patching & Updates 10 August 2026
Using TikTok is dangerous to your health
PUBLIC DEFENDER By Brian Livingston Realistic-looking videos that are the most-often recommended by the popular TikTok social media app regarding health care contain no real people 40 percent of the…
Read more →
Patching & Updates 10 August 2026
The hidden trade-offs of Windows Quick Machine Recovery
WINDOWS 11 By Martin Brinkmann Quick Machine Recovery auto-fixes Windows boot loops via the cloud, but granting Microsoft pre-boot control carries hidden risks. Here is the deep dive on how to manage…
Read more →
Patching & Updates 10 August 2026
98 years of technology
TAME YOUR TECH By Susan Bradley As my dad turns 98 years young today, I am reminded that technology is deeply integrated into his daily life. Yet, much of this daily tech is not geared toward his…
Read more →
Patching & Updates 7 August 2026
August 6, 2026 Apple Updates
On August 6, 2026, Apple released Updates for macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9. Only eleven days ago, Apple released a massive number of patches for vulnerabilities in…
Read more →
Patching & Updates 6 August 2026
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.6 Luna. [...]
Read more →
Patching & Updates 6 August 2026
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials. [...]
Read more →
Patching & Updates 6 August 2026
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile…
Read more →
Patching & Updates 6 August 2026
Swiss government SharePoint breach compromised 200 accounts
Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts. [...]
Read more →
Patching & Updates 6 August 2026
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. [...]
Read more →
Patching & Updates 6 August 2026
Meta AI model hacked a company during misconfigured cyber test
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's…
Read more →
Patching & Updates 6 August 2026
How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore
AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore. Skyhigh Security explains why browsers have become a critical control point for…
Read more →
Patching & Updates 6 August 2026
MS-DEFCON 2: Is Search going to get better?
ISSUE 23.31.1 • 2026-08-06 By Susan Bradley The upcoming August updates include several promised fixes for Windows Search. The August updates will include several fixes, a few of which specifically…
Read more →
Patching & Updates 5 August 2026
Ransom Cartel ransomware creator sentenced to 16 years in prison
Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies…
Read more →
Patching & Updates 5 August 2026
Canadian pleads guilty to Snowflake cloud data-theft attacks
A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data from at least 165 organizations in a scheme to extort millions of…
Read more →
Patching & Updates 5 August 2026
Hackers run khunt post-exploitation toolkit from Oracle database
Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. [...]
Read more →
Patching & Updates 5 August 2026
COLDCARD security audit phishing attack installs remote access tool
A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote…
Read more →
Patching & Updates 5 August 2026
CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws
The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited. [...]
Read more →
Patching & Updates 5 August 2026
Google Blogger locks hundreds of blogs in malware false positive
Google has locked hundreds of Blogger websites after a false positive claimed they violated its "Malware and Similar Malicious Content" policy, with some sites deleted from the platform. [...]
Read more →
Patching & Updates 5 August 2026
How AI-powered phishing killed blocklists for good
AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track fast enough. Push Security explains why browser-level, technique-based…
Read more →
Patching & Updates 5 August 2026
Vulnerabilities in our utilities
I’m sure you’ve seen the news that there have been recent cyber-attacks from external attackers on various water systems in the United States. Just the other day, PG&E changed out the gas smart meter…
Read more →
Patching & Updates 4 August 2026
OpenAI, Anthropic AI agents targeted real people and systems in cyber tests
OpenAI and Anthropic have confirmed that their AI models were involved in separate, newly disclosed third-party cybersecurity testing incidents that resulted in a real website being breached and…
Read more →
Patching & Updates 4 August 2026
Firefox 153.0.3 out
The latest release of Firefox 153.0.3 includes several enhancements: Smart Window includes: The suggestion list now shows more results, making it easier to find history and switch to open tabs. (Bug…
Read more →
Patching & Updates 4 August 2026
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]
Read more →
Patching & Updates 3 August 2026
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user…
Read more →
Patching & Updates 3 August 2026
New DOUBLECUP ClickFix service hides malware in browser cache images
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, ultimately delivering CountLoader to Windows and macOS…
Read more →
Patching & Updates 3 August 2026
Fake Roblox Xeno script launcher pushes infostealer, RAT malware
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. [...]
Read more →
Patching & Updates 3 August 2026
N-able warns of N-central auth bypass flaw exploited in attacks
N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]
Read more →
Patching & Updates 3 August 2026
ExfilSquad hackers leak info of over 100,000 UK police officers, staff
A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. [...]
Read more →
Patching & Updates 3 August 2026
Inside the Underground Business of the Android BTMOB RAT malware
Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a fragmented ecosystem of resellers, source-code vendors, custom versions,…
Read more →
Patching & Updates 3 August 2026
Tesla autonomy
ISSUE 23.31 • 2026-08-03 ACCESSBILITY By Will Fastie Tesla’s Full Self-driving (FSD) capability affects more than everyday convenience. It’s a little jolting to realize that the then-called Tesla…
Read more →
Patching & Updates 3 August 2026
View from the Insiders
WINDOWS 11 By Mary Branscombe Changes to File Explorer might show that Microsoft is serious about listening to users — and fixing Windows 11. The Windows Insider program has been through a lot of…
Read more →
Patching & Updates 3 August 2026
RightClickTools — If there’s an easier way, I’m gonna find it!
FREEWARE SPOTLIGHT By Deanna McElveen I think my goal in life is to sit back in my easy chair, eat cherry cordials, and do all my computer work with one hand. RightClickTools by our good friend Les…
Read more →
Patching & Updates 3 August 2026
Separating that network
ON SECURITY By Susan Bradley OpenAI’s recent attack on another company’s cloud instances reminds me that sometimes we forget the basics. As we understand the situation at the moment, OpenAI’s test…
Read more →
Patching & Updates 2 August 2026
OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems
OpenAI has revealed Astra, an unreleased model designed to tackle complex, long-running tasks, after an internal version produced ten significant advances in mathematics and theoretical computer…
Read more →
Patching & Updates 2 August 2026
COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft
A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number…
Read more →
Patching & Updates 2 August 2026
Google Chrome may soon block New Tab hijacker extensions by default
Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine. [...]
Read more →
Patching & Updates 1 August 2026
Rails patches critical Active Storage flaw with RCE potential
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution…
Read more →
Patching & Updates 31 July 2026
Amgen says cloud data breach exposed patient health, proprietary info
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service…
Read more →
Patching & Updates 31 July 2026
Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]
Read more →
Patching & Updates 31 July 2026
Online ad firm Adform’s script compromised to steal cryptocurrency
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors'…
Read more →
Patching & Updates 31 July 2026
OpenAI says its new GPT 5.6 models are becoming more cost-efficient
OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna's API price by 80% and Terra's by 20% as it works to make its models more efficient. [...]
Read more →
Patching & Updates 31 July 2026
AI and the Hugging Face breach
If you missed it the other day, SANS has a recording of its recent live-panel discussion of the OpenAI/Hugging Face breach. It points to nine questions to ask your security teams. But what about us…
Read more →
Patching & Updates 31 July 2026
Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security…
Read more →
Patching & Updates 30 July 2026
South Korea fines telco giant KT $39 million for customer data breach
South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]
Read more →
Patching & Updates 30 July 2026
JetBrains warns of critical TeamCity remote code execution flaw
JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]
Read more →
Patching & Updates 30 July 2026
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]
Read more →
Patching & Updates 30 July 2026
VMware fixes three critical flaws allowing auth bypass, VM escapes
Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication,…
Read more →
Patching & Updates 30 July 2026
Google says AI helped Chrome fix 1,072 security bugs in two releases
Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's…
Read more →
Patching & Updates 30 July 2026
ShinyHunters claims Brinks Home breach, threatens to leak stolen data
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. [...]
Read more →
Patching & Updates 30 July 2026
Microsoft Teams vishing attacks lead to Chaos ransomware attacks
Threat actors are impersonating IT support staff in Microsoft Teams calls to gain remote access to corporate devices and deploy Chaos ransomware in attacks targeting North American organizations.…
Read more →
Patching & Updates 30 July 2026
Analog Devices discloses data breach, says operations unaffected
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files. [...]
Read more →
Patching & Updates 30 July 2026
After the Break-In: What Attackers Do Once They're Already Inside
Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish persistence, disable defenses, and reshape compromised systems, and…
Read more →
Patching & Updates 30 July 2026
No bubble in the cloud, yet
In the news: Microsoft reported blowout fiscal Q4 2026 earnings today, and the stock is jumping hard in after-hours trading. Here ae the headlines: Revenue: $90.0 billion, up 18% year-over-year, well…
Read more →
Patching & Updates 29 July 2026
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor…
Read more →
Patching & Updates 29 July 2026
Anthropic confirms Claude is down worldwide
Claude is down for some users, with Anthropic confirming elevated errors across multiple AI models. The disruption is causing requests to fail with a "529 Overloaded" message, including in Claude and…
Read more →
Patching & Updates 29 July 2026
Cisco warns of FMC static credential flaw exploited in zero-day attacks
Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain…
Read more →
Patching & Updates 29 July 2026
Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successful attacks by…
Read more →
Patching & Updates 29 July 2026
OpenAI agent used exposed credentials at 4 services in Hugging Face breach
In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of…
Read more →
Patching & Updates 29 July 2026
Pay over time
Cash may be king but pay-over-time is the new way that many manufacturers are getting around the sticker shock of technology. Apple announced its version just yesterday. Microsoft has long had a…
Read more →
Patching & Updates 28 July 2026
July 27, 2026 Apple Updates
On July 27, 2026, Apple released Updates for macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, iOS/iPadOS 26.6, watchOS 26.6, tvOS 26.6. HomePod 26.6. Safari 26.6 was also released for…
Read more →
Patching & Updates 28 July 2026
MS-DEFCON 4: The AI apocalypse
ISSUE 23.30.1 • 2026-07-28 By Susan Bradley • Comment about this alert Today, I want to tell you that I’m less worried about the side effects of this month’s security updates from Windows, Apple, and…
Read more →
Patching & Updates 27 July 2026
Simple Sticky Notes — Keeping your peas and potatoes separated
ISSUE 23.30 • 2026-07-27 FREEWARE SPOTLIGHT By Deanna McElveen I was never a big fan of Microsoft’s built-in Sticky Notes nor its forced “upgrade” to the bloated and slow Sticky Notes New. I don’t…
Read more →
Patching & Updates 27 July 2026
Anyone may be able to access your camera with a simple step
PUBLIC DEFENDER By Brian Livingston Millions of people around the world have installed Internet-connected “security cameras” to monitor foot traffic around their homes and offices. Unfortunately,…
Read more →
Patching & Updates 27 July 2026
Windows 10 and Office
MICROSOFT 365 By Peter Deegan Microsoft recently extended the Windows 10 ESU plan until October 2027. What you might not realize is that neither Microsoft 365 updates nor Office updates are part of…
Read more →
Patching & Updates 27 July 2026
Tracking the attacker
ON SECURITY Tracking the attacker By Susan Bradley Recently, Apple, Adobe, Microsoft, and others released updates illustrating how much we are being impacted by AI. The three major vendors either…
Read more →
Patching & Updates 24 July 2026
Shouldn’t Windows do this by now?
When I resize a hard drive’s partition, most of the time I can easily expand it. Then there are those times I have to use a third-party tool to boot under the operating system and resize the drive.…
Read more →
Patching & Updates 24 July 2026
Clop ransomware targets Windchill, FlexPLM in data theft attacks
The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. [...]
Read more →
Patching & Updates 23 July 2026
New Dolphin X malware uses AI to rank high-value targets
A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercriminals identify which victims should be targeted first. [...]
Read more →
Patching & Updates 23 July 2026
Australian energy provider Origin says data breach exposes client data
Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive personally identifiable information (PII), among others. [...]
Read more →
Patching & Updates 23 July 2026
Fake Claude app promoted by Bing ads pushes SectopRAT malware
A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to deliver the SectopRAT malware. [...]
Read more →
Patching & Updates 23 July 2026
Russian hackers exploit Zimbra zero-click flaw for email theft
CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing…
Read more →
Patching & Updates 23 July 2026
Hackers abuse Notepad++ plugins to stealthily install malware
Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish persistence.…
Read more →
Patching & Updates 23 July 2026
Microsoft 365 outage affects Teams, SharePoint and other services
Microsoft is impacted by a massive outage affecting Teams and Microsoft 365 services, primarily affecting users in North America. [...]
Read more →
Patching & Updates 23 July 2026
FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires
FedRAMP 20X replaces point-in-time assessments with continuous, machine-readable evidence that demonstrates security controls are working. Anecdotes explains what the transition from Rev5 to FedRAMP…
Read more →
Patching & Updates 23 July 2026
EU fines Google $1 billion for search, app store antitrust violations
The European Commission fined Google €890 million ($1 billion) on Thursday after finding the company had violated the European Union's Digital Markets Act (DMA), which ensures fair online…
Read more →
Patching & Updates 23 July 2026
New RefluXFS Linux flaw lets attackers gain root privileges
A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges. [...]
Read more →
Patching & Updates 23 July 2026
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]
Read more →
Patching & Updates 23 July 2026
Microsoft working to fix Exchange Online mailbox quarantine issue
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since Sunday. [...]
Read more →
Patching & Updates 23 July 2026
Check Point warns of SmartConsole zero-day exploited in attacks
Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel. [...]
Read more →
Patching & Updates 23 July 2026
AI is good until it’s not
The latest in AI wars has to do with AI being used by attackers. There is a recent case in which a company that used to provide a chatbot app for teenagers pivoted to being a platform for machine…
Read more →
Patching & Updates 22 July 2026
Upbound says hack caused $13 million in fraudulent Acima leases
The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]
Read more →
Patching & Updates 22 July 2026
South Korea discloses data breach impacting diplomats worldwide
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the…
Read more →
Patching & Updates 22 July 2026
Voice to spreadsheets?
I often see voice recognition software being touted as a way around keyboard issues. But the brick wall I see is spreadsheets. Telling Excel what do to versus DOING it, it’s just something I can’t…
Read more →
Patching & Updates 21 July 2026
The password problem
One of the things I do in the office is keep abreast of upcoming password changes and help folks in the office navigate the change. Entra is going to be rolling out a keypass only for anyone still…
Read more →
Patching & Updates 20 July 2026
The patch apocalypse is here
ISSUE 23.29 • 2026-07-20 PATCH WATCH By Susan Bradley Well, the benefits of AI are clearly here — at least in terms of bug counts. Microsoft fixed 621 vulnerabilities this time around. However, take…
Read more →
Patching & Updates 20 July 2026
Stuff that really bugs me
COMMENTARY By Will Fastie I don’t have a problem embracing change, except for grocery prices. In most cases, my complaints are usually centered on things made worse by changes or on things that…
Read more →
Patching & Updates 20 July 2026
YouTube really bugs me
COMMENTARY By Will Fastie AI could ruin YouTube, not only for viewers but also for creators. YouTube has been a tremendously useful resource over the years, for both entertainment and education. Want…
Read more →
Patching & Updates 20 July 2026
Readers offer excellent PDF advice
FROM THE FORUMS I recently wrote the article Older software to the rescue, which included a note about my having replaced Adobe Acrobat DC with the ten-year-old program PDF Fusion. The forum topic…
Read more →

Want the full curated IT newsletter every Friday?

Subscribe free — EndpointWeekly