Patch Management

Microsoft Warns AI-Driven Vulnerability Discovery Will Mean Busier Patch Tuesdays

Patch Tuesdays get busier as AI drives vulnerability discovery — defender-team cadence review this week.

Vulnerabilities

Maximum-Severity Adobe ColdFusion Flaw Now Actively Exploited, Infosecurity Magazine Reports

A maximum-severity ColdFusion flaw under active attack — accelerated patch verification this week.

Vulnerabilities

Progress Publishes Advisory for Critical Kemp LoadMaster Flaw CVE-2026-8037

A pre-authenticated critical vulnerability in a widely-deployed load balancer — patch verification for defender teams this week.

Policy & Government

Microsoft Publishes Quantum-Safe Guidance as the Risk Timeline Shifts

Microsoft's PQC guidance lands alongside the accelerated federal deadline — vendor roadmap alignment this week.

Vulnerabilities

Citrix Patches Six NetScaler Flaws, Including CVE-2026-8451 With Echoes of CitrixBleed

Six NetScaler flaws, one with echoes of CitrixBleed — defender teams stay in patch-verification posture this week.

Flat white line-art of a motherboard boot chip, a key, and a wall calendar, on a Moss background — Windows and Linux Secure Boot key-update deadline.

Vulnerabilities

Approaching Deadline for Windows and Linux Secure Boot Key Updates

A lifecycle deadline that requires defender coordination with hardware vendors, as Microsoft's 2011-era Secure Boot certificates begin expiring across Windows and Linux environments.

Flat white line-art of a proxy server stack with two routing arrows and a patch tile, on an Oxblood background — F5 NGINX Open Source critical patches.

Vulnerabilities

F5 Patches Two Critical NGINX Open Source Flaws (CVE-2026-42530, CVE-2026-42055)

Two critical NGINX Open Source patches — defenders running reverse-proxy and web-tier deployments should verify the patched versions this week.

Flat white line-art of a shield with two overlapping patch tiles beside a console panel, on a Charcoal background — Cisco additional SD-WAN Manager patch.

Vulnerabilities

Cisco Ships an Additional Catalyst SD-WAN Manager Patch as Exploitation Continues

Cisco's SD-WAN patch cycle continues this week — defender verification stays the priority.

Flat white line-art of a network router beside a management console panel and a wrench, on a Raspberry background — Cisco Catalyst SD-WAN Manager advisory and patch.

Vulnerabilities

Cisco Patches an Actively Exploited Catalyst SD-WAN Manager Flaw (CVE-2026-20262)

Patch verification across Catalyst SD-WAN Manager deployments is the high-priority cycle this week.

Flat white line-art of a large dashboard panel beside an open data pipeline, on a Forest Green background — Splunk Enterprise critical vulnerability patch.

Vulnerabilities

Splunk Discloses Critical Splunk Enterprise Vulnerability

The SIEM at the center of many SOCs gets a critical-priority patch — verify deployments.

Flat white line-art of a mobile gateway box with an open hatch and a clock face, on a Brick Rust background — Ivanti Sentry critical flaws.

Vulnerabilities

Ivanti Sentry Critical Flaws Exploited 24 Hours After Disclosure

Twenty-four hours separated disclosure from in-the-wild exploitation — CISA's emergency directive gives federal agencies three days to patch.

Flat white line-art of a sorting funnel routing shapes onto fast and slow tracks, on a Mulberry background — CISA BOD 26-04 risk-based patching.

Policy & Government

CISA Rewrites Federal Patching with BOD 26-04 — Patch by Risk, Fix Criticals in 3 Days

CISA's new directive ends CVSS-led patching for federal agencies — risk becomes the prioritization signal, and the most dangerous bugs must be patched in three days.

See all