CVE Watch
August 2026 produced only two true zero-days. Almost everything else CISA flagged as under attack had been patched weeks or months earlier — the month attackers spent cashing in on fixes defenders already had.
CVE Watch
July belonged to SharePoint — four separate flaws exploited in the wild — while Microsoft shipped the largest Patch Tuesday in its history at 569 CVEs. Here's what to fix first.
CVE Watch
Microsoft shipped its first zero-day-free Patch Tuesday since June 2024 — but the month's real action was elsewhere: a CISA Emergency Directive for Cisco SD-WAN, exploited PAN-OS flaws, and a Drupal core SQL-injection, all under active attack.