Patch Now

The CVEs that cannot wait.

  • 36 Tracked terms
  • Last 30 days Feed window

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in Patch Now


helpnetsecurity.com > 10/09/2026 > october-2026-patch-tuesday-forecast

October 2026 Patch Tuesday forecast: Time for an Office cleanup

4+ hour, 43+ min ago   (420+ words) Help Net Security October 2026 Patch Tuesday forecast: Time for an Office cleanup September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb…...


helpnetsecurity.com > 10/09/2026 > christiaan-beek-rapid7-bpfdoor-backdoor

What the BPFDoor backdoor tells us about attacks on the network edge

5+ hour, 3+ min ago   (233+ words) BPFDoor is a Linux backdoor designed to stay silent until it receives a specific “magic packet.” Unlike traditional malware, it doesn’t need to beacon constantly or open an obvious listening port, which would draw attention. Because the edge combines Internet…...


mashable.com > article > apple-macos-sequoia-cybersecurity-vpn-issues

New macOS Sequoia update reportedly not playing nice with VPNs and cybersecurity tools like CrowdStrike

5+ hour, 29+ min ago   (333+ words) It's a big week for Apple. The new iPhone 16 line hits store shelves today alongside the new AirPods 4. Just a few days earlier, Apple released the new iOS 18 and macOS 15, also known as macOS Sequoia, too. However, Mac users are…...


cybersecuritynews.com > vmware-vmxnet3-flaw-poc

PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to-Host Code Execution

1+ day, 4+ hour ago   (512+ words) A public proof of concept is now available for CVE-2026-59346, a critical integer overflow flaw in VMware’s VMXNET3 virtual network adapter, released by 0xCyberstan. The flaw can allow an attacker with administrative access inside a guest virtual machine to execute code on…...


cyberinsider.com > hackers-run-doom-on-lexmark-printer-at-pwn2own-ireland-day-2

Hackers run DOOM on Lexmark printer at Pwn2Own Ireland Day 2

1+ day, 23+ min ago   (402+ words) Interrupt Labs hacked a Lexmark CX532adwe printer and displayed DOOM on its screen during the second day of Pwn2Own Ireland 2026, earning $5,000 and two Master of Pwn points. The October 7 session also saw successful attacks against Samsung’s Galaxy S26, Home Assistant Green, Sonos speakers,…...


dev.to > onaeiuspkz > reading-the-cvss-71-score-for-cve-2025-38680-local-low-complexity-high-confidentiality-impact-36h9

Reading the CVSS 7.1 Score for CVE-2025-38680: Local, Low Complexity, High Confidentiality Impact

6+ hour, 35+ min ago   (763+ words) Vulnerability overview CVE-2025-38680 is a Linux kernel out-of-bounds read in the USB Video Class driver, in uvc_parse_format(). NVD scores it 7.1 with base severity HIGH under CVSS 3.1, using the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N…...


bleepingcomputer.com > news > security > cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover > amp

Cisco warns of critical flaws allowing Nexus switch takeover

19+ hour, 51+ min ago   (557+ words) Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. If remote code execution cannot be achieved, an attacker could…...


dev.to > kozhevniko > cve-2026-103663-sits-in-the-model-delivery-path-and-that-is-what-makes-it-dangerous-2467

CVE-2026-103663 sits in the model delivery path, and that is what makes it dangerous

10+ hour, 36+ min ago   (323+ words) CVE-2026-103663 is a relative path traversal vulnerability, CWE-23, in Ollama 0.34.2 through 0.35.0, fixed in 0.35.0. CERT Polska published the advisory on 8 October 2026 and credits Bartlomiej Dmitruk of striga.ai with the report. The vulnerability is small. The position it occupies in a…...


securityaffairs.com > 200591 > security > atlassian-vulnerability-comes-under-attack-hours-after-details-go-public.html

Atlassian Vulnerability Comes Under Attack Hours After Details Go Public

1+ day, 3+ hour ago   (576+ words) Italy's Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu Atlassian Vulnerability Comes Under Attack Hours After Details…...


securityaffairs.com > 200558 > cyber-crime > fortibleed-hit-86000-firewalls-by-exploiting-something-nobody-can-patch-away.html

FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away

1+ day, 21+ hour ago   (427+ words) Italy's Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu Atlassian Vulnerability Comes Under Attack Hours After Details…...