2+ day, 8+ hour ago   (642+ words) A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities…...

4+ day, 5+ hour ago   (437+ words) Possibly wormable bugs and two zero-day holes highlight the almost 1,000 fixes issued today by Microsoft in its September Patch Tuesday release. The 964 vulnerabilities, another record since Microsoft began using AI in the middle of the year to find holes, require…...

5+ day, 21+ hour ago   (499+ words) A max-severity zero-day bug could be affecting cybersecurity firm N-able’s N-central remote monitoring and management platform, the company said, even as administrators were applying a hotfix for two vulnerabilities disclosed just a day earlier. The latest flaw, tracked as CVE…...

1+ week, 4+ day ago   (570+ words) Sabine Frömling, MBA, is an independent cybersecurity, OT security and governance consultant and the author of "ISMS für die Industrie – Der Praxisratgeber", with an English-language edition forthcoming in fall 2026. Since 2008, she has advised companies in the energy, manufacturing, pharmaceutical and…...

2+ week, 3+ day ago   (720+ words) Microsoft is warning that the window for patching vulnerabilities is rapidly shrinking, as attackers move from disclosure to exploitation faster than enterprises can safely deploy fixes, and is urging organizations to adopt network-level controls to limit exposure during that gap....

3+ week, 2+ day ago   (520+ words) Citrix is urging its NetScaler ADC and NetScaler Gateway customers to quickly patch two critical security holes, one involving a memory overflow vulnerability leading to unpredictable behavior or denial of service, and the other allowing authentication bypass. Citrix said in…...