← Back to home
PA

Patching & Updates Daily Hub

Windows Autopatch, hotpatch, Patch Tuesday and feature update management for IT engineers.

Updated daily · 17 October 2026 at 11:27 UTC
Visit official portal ↗

Latest Articles (112 today)

📰 Read the weekly newsletter →
Patching & Updates 16 October 2026
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on…
Read more →
Patching & Updates 16 October 2026
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device.…
Read more →
Patching & Updates 16 October 2026
Employees using personal ChatGPT at work? Here's what IT admins need to do
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can…
Read more →
Patching & Updates 16 October 2026
Burger King Japan data breach exposes 11 million customer records
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...]
Read more →
Patching & Updates 16 October 2026
Microsoft: October Windows update may break Smart App Control
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]
Read more →
Patching & Updates 16 October 2026
Crusty boxes
No matter what folks say AI can and cannot do, there is nothing like patch testing on a “crusty” box. What do I mean by a crusty box? One that is actively used, has files and has been in use for…
Read more →
Patching & Updates 16 October 2026
BAE Systems cyberattack disrupts US federal court operations
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...]
Read more →
Patching & Updates 16 October 2026
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
Read more →
Patching & Updates 15 October 2026
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
Read more →
Patching & Updates 15 October 2026
Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
Read more →
Patching & Updates 15 October 2026
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
Read more →
Patching & Updates 15 October 2026
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
Read more →
Patching & Updates 15 October 2026
Is AI pentesting as good as a human pentester?
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and…
Read more →
Patching & Updates 15 October 2026
Microsoft: Windows Server 2022 reached end of mainstream support
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]
Read more →
Patching & Updates 15 October 2026
Meet the new Photos app on Windows 11
Photos hold some of our most meaningful memories: the people we love, the milestones we celebrate, and the everyday moments we want to remember. They connect us to our past and help us share our…
Read more →
Patching & Updates 15 October 2026
What’s new in Windows 11: Everyday experiences, reimagined
Every day, your PC helps you get things done, stay connected, capture ideas and make time for what you enjoy. That’s why Windows 11 continues to evolve, starting with a faster, more dependable and…
Read more →
Patching & Updates 15 October 2026
Incredible deals and more to love in a new Windows PC this holiday
A new PC is a meaningful purchase. Whether you are upgrading a family laptop, shopping for a student, or someone who loves to create or game, you want your money to go further. The right PC should…
Read more →
Patching & Updates 15 October 2026
Police arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material…
Read more →
Patching & Updates 15 October 2026
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]
Read more →
Patching & Updates 15 October 2026
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole…
Read more →
Patching & Updates 15 October 2026
Master Patch List for October 2026
I’ve updated the master patch list here. Please note I am not recommending installing updates at this time, we are just testing and reporting. I’ll be updating that page and monitoring for issues. So…
Read more →
Patching & Updates 14 October 2026
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Read more →
Patching & Updates 14 October 2026
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North…
Read more →
Patching & Updates 14 October 2026
The stats for October
A reminder about the stats for Patch Tuesday: 1,407 vulnerabilities, two zero days, and one exploited in the wild. However, only 4.9% of those vulnerabilities are critical and most of those are for…
Read more →
Patching & Updates 13 October 2026
October 2026 Windows Patches out
Here we go again, it’s Patch day. A big one in terms of vulnerabilities patched. Remember this is the last day for Consumer/Pro 24H2 updates. For those that use ReFS on removable media you will want…
Read more →
Patching & Updates 12 October 2026
The VBScript sunset
ISSUE 23.41 • 2026-10-12 WINDOWS 11 By Martin Brinkmann Microsoft is phasing out VBScript, with the next major compatibility hit arriving around 2026–27. Here is what actually breaks, why VBA…
Read more →
Patching & Updates 12 October 2026
AI is very smart. Just ask it.
COMMENTARY By Amy Babinchak I am a known person in the Great Lakes sailing community, at least in some circles. Recently, I was asked to identify a fish from a photograph taken in northern Lake…
Read more →
Patching & Updates 12 October 2026
Brightness.Manager.OK — What witchery is this?!
FREEWARE SPOTLIGHT By Deanna McElveen All I wanted was a free program to adjust the brightness of my two computer screens. Bright screens are pretty irritating on my old eyes at five a.m. I could…
Read more →
Patching & Updates 12 October 2026
Cybersecurity annoyances
ON SECURITY By Susan Bradley It’s that time of the year again. No, not pumpkin spice — I’m talking about Cybersecurity Awareness Month. AI provided this definition: “October is recognized as…
Read more →
Patching & Updates 9 October 2026
How to keep AI agents within their permissions
AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations…
Read more →
Patching & Updates 9 October 2026
Max severity SonicWall SMA1000 flaw now exploited in attacks
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]
Read more →
Patching & Updates 9 October 2026
Man admits to running network of 15,000 money mules for cybercriminals
​A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. [...]
Read more →
Patching & Updates 9 October 2026
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. [...]
Read more →
Patching & Updates 9 October 2026
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access…
Read more →
Patching & Updates 9 October 2026
Changes coming to search
I’m not a person who recommends installing Insider builds of Windows, but I do keep an eye on them. Microsoft announced that it is working on fixing and streamlining Search. Beginning 10/7, we’re…
Read more →
Patching & Updates 9 October 2026
Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. [...]
Read more →
Patching & Updates 8 October 2026
FBI disrupts Chinese hacking tools used to breach critical infrastructure
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical…
Read more →
Patching & Updates 8 October 2026
Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster…
Read more →
Patching & Updates 8 October 2026
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install…
Read more →
Patching & Updates 8 October 2026
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. [...]
Read more →
Patching & Updates 8 October 2026
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus…
Read more →
Patching & Updates 8 October 2026
OAuth grants pile up faster than you can review them. Here's how to keep up.
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers…
Read more →
Patching & Updates 8 October 2026
Uranium crypto exchange hacker convicted for stealing $53 million
A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021. [...]
Read more →
Patching & Updates 8 October 2026
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings. [...]
Read more →
Patching & Updates 8 October 2026
ASOS links data breach to social engineering attack, credential theft
ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data. [...]
Read more →
Patching & Updates 8 October 2026
Microsoft’s hardware event
Microsoft’s hardware event was yesterday. Let’s just say I won’t be purchasing one of these devices in the future. They are way too expensive — even with the trade in. Granted, these units are for…
Read more →
Patching & Updates 8 October 2026
MS-DEFCON 2: 26H2 is here
ISSUE 23.40.1 • 2026-10-09 By Susan Bradley Will October be better? It’s pumpkin spice season at the coffee shops, and there are pumpkins and Halloween decorations galore. But where I live, you…
Read more →
Patching & Updates 7 October 2026
Building Windows for hybrid intelligence
Agents are cre The post Building Windows for hybrid intelligence appeared first on Windows Experience Blog.
Read more →
Patching & Updates 7 October 2026
AI on your machine
The other day, a reader posed an interesting question about how one can tell whether they have inadvertently installed AI on their computer. Most of the time, we know when we are installing or using…
Read more →
Patching & Updates 6 October 2026
Alexa, I said something totally different
I have an Alexa auto echo device in my car mainly for asking Alexa questions like “Hey, Alexa what’s the seven-day weather forecast?” Yes, I realize it’s obvious we’re in a late heat wave here in…
Read more →
Patching & Updates 5 October 2026
Who gets what with Copilot
ISSUE 23.40 • 2026-10-05 MICROSOFT 365 By Peter Deegan Copilot benefits are now available for all, ranging from a few for free Microsoft accounts and those sharing a Microsoft 365 plan, and more for…
Read more →
Patching & Updates 5 October 2026
How to beat the soaring prices of storage and memory
PUBLIC DEFENDER By Brian Livingston By some accounts, computer-chip prices have doubled, tripled, or even quadrupled in just the past year. You can blame it on vast new data centers that require…
Read more →
Patching & Updates 5 October 2026
Microsoft Paint — new for Windows 11
WINDOWS 11 By Nathan Segal Microsoft Paint is a basic image editor which has been bundled with Windows since 1985. Originally delivered with Windows 1.0, the early versions included basic drawing…
Read more →
Patching & Updates 5 October 2026
Making good choices, getting good advice
TAME YOUR TECH By Susan Bradley Is technology getting too complicated? The other day, a coworker needed assistance to replace his Internet modem. Rather than renting it from the ISP, he had purchased…
Read more →
Patching & Updates 2 October 2026
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments. [...]
Read more →
Patching & Updates 2 October 2026
Microsoft’s X account hacked in crypto pump-and-dump scheme
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token. [...]
Read more →
Patching & Updates 2 October 2026
Amy Babinchak and I talk patching!
I talk with Amy Babinchak about how AI Is transforming vulnerability management and patching for MSPs. You can watch it on YouTube or listen to the podcast. Amy also talks about patching “everything…
Read more →
Patching & Updates 1 October 2026
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on…
Read more →
Patching & Updates 1 October 2026
Autonomous AI agents tried to hack US, Canadian government websites
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics. [...]
Read more →
Patching & Updates 1 October 2026
Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and…
Read more →
Patching & Updates 1 October 2026
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and servers, led to three arrests, and identified a 16-year-old as the…
Read more →
Patching & Updates 1 October 2026
The Day-One Hole in Zero Trust Architecture
Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust before strong authentication exists. Specops explains why identity…
Read more →
Patching & Updates 1 October 2026
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security…
Read more →
Patching & Updates 1 October 2026
Microsoft enables Windows settings backup by default for orgs
Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2.…
Read more →
Patching & Updates 1 October 2026
Hackers stole Pentagon personnel records of over 3 million people
The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon's human resources management system in…
Read more →
Patching & Updates 1 October 2026
AI is killing off RSS feeds
The other day, Microsoft quietly got rid of RSS feeds that allowed many of us to monitor new and changed Knowledge Base postings for Microsoft. I’m not sure whether this is due to the concern of AI…
Read more →
Patching & Updates 1 October 2026
Metamask discloses security incident affecting its infrastructure
On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of its infrastructure. [...]
Read more →
Patching & Updates 30 September 2026
Russian state hackers use new RedFlick technique to push malware
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor. [...]
Read more →
Patching & Updates 30 September 2026
DIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing…
Read more →
Patching & Updates 30 September 2026
Over 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data. [...]
Read more →
Patching & Updates 30 September 2026
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service…
Read more →
Patching & Updates 30 September 2026
Enablement package links
For businesses, the easier way to get (and TEST) 26H2 is use the Enablement package links…
Read more →
Patching & Updates 29 September 2026
Windows 11 26H2 is now being offered
Windows 11 26H2 is being offered up – or in my case when I went to scan for updates – it offered to download and install. It is not being pushed at this time, just offered. For those of you in a…
Read more →
Patching & Updates 29 September 2026
How to get the Windows 11 2026 Update
Windows powers how people around the world work, learn, create, and connect every day. Today, we're announcing the availability of the Windows 11 2026 Update, also known as Windows 11, version 26H2.…
Read more →
Patching & Updates 29 September 2026
September 28, 2026 Apple Updates
Apple has released Updates again on Sept 28, 2026. The updates for the newer versions of the Operating Systems, macOS Golden Gate 27.0.1, iOS/iPadOS 27.0.1, watchOS 27.0.1, and visionOS 27.0.1, have…
Read more →
Patching & Updates 28 September 2026
TMOG modernizes the Windows Task Manager
ISSUE 23.39 • 2026-09-28 BEN’S WORKSHOP By Ben Myers Dave Plummer, author of the original Windows Task Manager, has written the 21st-century “Task Manager OG.” TMOG is a modern Task Manager providing…
Read more →
Patching & Updates 28 September 2026
How to manage and control your updates in Windows 11
WINDOWS 11 By Lance Whitney There’s more to Windows Update than just installing the latest patches and bug fixes. Here’s how to better manage the process and handle trouble along the way. Keeping…
Read more →
Patching & Updates 28 September 2026
Migrating the tricky bits
ON SECURITY By Susan Bradley Years ago, my first iPhone-to-iPhone migration was flawless. I did a full encrypted backup to a hard drive on my personal computer, tethered the new phone to the…
Read more →
Patching & Updates 28 September 2026
I was wrong about the iPhone 17e — again!
APPLE By Will Fastie I can’t remember the last time I was this confused. Apple’s marketers are messing with my head. On September 16, I posted a quick note to the blog venting my frustration over…
Read more →
Patching & Updates 25 September 2026
Rydox marketplace admin pleads guilty, faces 22 years in prison
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools. [...]
Read more →
Patching & Updates 25 September 2026
Microsoft: Recent Windows updates cause desktop loading issues
Microsoft has confirmed that some users may experience desktop loading issues, including black screens, after installing the August 2026 preview updates and subsequent updates. [...]
Read more →
Patching & Updates 25 September 2026
Hackers steal $351.6 million in Bitget crypto exchange hack
​Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets. [...]
Read more →
Patching & Updates 25 September 2026
A bit of reorganization
The side bar has always been a bit messy. Rather than having a long “Recent topics” list, I’ve collapsed it into a single link to the shorter “Latest Topics” section of the forum. It presents the…
Read more →
Patching & Updates 24 September 2026
MacSync malware uses public iCloud calendars to deliver new payloads
A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads. [...]
Read more →
Patching & Updates 24 September 2026
September 23, 2026 Apple Update
Apple has released one Update on Sept 23, 2026, watchOS 27.01, for Apple Watch Series 12 and Apple Watch Ultra 4. This update has no published CVE entries. This update fixes a bug that caused Apple…
Read more →
Patching & Updates 24 September 2026
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]
Read more →
Patching & Updates 24 September 2026
Exposed GitLab project email addresses let attackers push code
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug…
Read more →
Patching & Updates 24 September 2026
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FedRAMP's new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why…
Read more →
Patching & Updates 24 September 2026
Hackers now exploit critical Roundcube flaw in code injection attacks
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. [...]
Read more →
Patching & Updates 24 September 2026
Windows 11 KB5124010 update released with 46 changes and fixes
Microsoft released the KB5124010 September 2026 non-security preview update for Windows 11 24H2 and 25H2, with 46 changes including Bluetooth improvements and the ability to remap the Copilot key.…
Read more →
Patching & Updates 24 September 2026
CISA: Ransomware gangs now exploiting critical TeamCity flaw
​The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability…
Read more →
Patching & Updates 24 September 2026
OpenAI hacked Australian Medicare govt site, probed data providers
OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing…
Read more →
Patching & Updates 24 September 2026
Microsoft fixes bug that broke Windows File History backup feature
Microsoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. [...]
Read more →
Patching & Updates 24 September 2026
When was the start of the security industry?
What do you think was the official start of the security industry? Some will say it was when the Morris Worm hit in November 1988. It started people thinking more about firewalls and a vulnerability…
Read more →
Patching & Updates 23 September 2026
Placeholder domain used in dev docs now serves ClickFix attacks
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into…
Read more →
Patching & Updates 23 September 2026
New RemControl Android banking malware targets users in Europe and Canada
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]
Read more →
Patching & Updates 23 September 2026
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of…
Read more →
Patching & Updates 23 September 2026
The hits for September just keep on coming
Although the fix for the File History bug has been fixed in a preview update for Windows 11, there is no such advanced fix for those of you on Windows 10. Your choice is to uninstall the September…
Read more →
Patching & Updates 22 September 2026
MS-DEFCON 2: Guiding you in for a landing
ISSUE 23.38.1 • 2026-09-22 By Susan Bradley What. A. Mess. Remember that scene at the end of the second Die Hard movie? You know — the one where terrorists have taken over the air-traffic control…
Read more →
Patching & Updates 21 September 2026
Pope Leo on AI and the Internet
ISSUE 23.38 • 2026-09-21 RATIONAL AI By Michael A. Covington Pope Leo XIV has issued an encyclical about digital culture and artificial intelligence. In what follows, I’ll summarize what computer…
Read more →
Patching & Updates 21 September 2026
To err is human … and we’d like to keep it that way
LEGAL BRIEF By Max Stul Oppenheimer, Esq. If I had to guess, I’d say that the majority of people are tired of hearing about AI and have yet to see any significant benefits. I myself am tired of…
Read more →
Patching & Updates 21 September 2026
Protect your money from the coming ‘bitcoin apocalypse’
PUBLIC DEFENDER By Brian Livingston A new study says quantum computers now in development will enable hackers to steal bitcoins and other cryptocurrencies without knowing the passwords or even the…
Read more →
Patching & Updates 21 September 2026
Not all passkeys are created equally
ON SECURITY By Susan Bradley Not a day goes by without a prompt to set up a passkey. As with everything in security, there are trade-offs. These mostly have to do with balancing security and…
Read more →
Patching & Updates 18 September 2026
New Check Point flaw lets hackers execute code with root privileges
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. [...]
Read more →
Patching & Updates 18 September 2026
By the time you read this
A ton of tiny packages will be enroute to their final destination. If you’ve ever tracked “event shipments,” it’s actually sort of geeky/interesting on the logistics of getting things from here to…
Read more →
Patching & Updates 18 September 2026
Microsoft fixes broken copy and paste for Excel 2016 users
Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5002914 security update. [...]
Read more →
Patching & Updates 17 September 2026
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices. [...]
Read more →
Patching & Updates 17 September 2026
OpenAI details more cases of AI agents taking unauthorized actions
OpenAI has presented new examples of what they call "AI model misalignment" from the past six months, including unauthorized file uploads, following self-generated instructions, hiding mistakes, and…
Read more →
Patching & Updates 17 September 2026
Brevo supply-chain attack injected ClickFix scripts on customer sites
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.…
Read more →
Patching & Updates 17 September 2026
What Recent AI-Powered Attacks Mean for Your Identity Security
AI is making credential theft faster and easier to scale, giving attackers more opportunities to abuse valid identities. Specops explains why identity security must go beyond successful…
Read more →
Patching & Updates 17 September 2026
Windows 11 24H2 Home and Pro reach end of support in October
Microsoft reminded customers this week that devices running Windows 11 24H2 Home and Pro editions will stop receiving updates next month. [...]
Read more →
Patching & Updates 17 September 2026
US takes down NightmareStresser DDoS-for-hire platform
The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world's longest-running distributed denial-of-service (DDoS) platforms. [...]
Read more →

Want the full curated IT newsletter every Friday?

Subscribe free — EndpointWeekly