Patch Security News

Vendor patches, security updates and fix releases for previously disclosed vulnerabilities.

Patches are the other half of the vulnerability story: the fixes vendors ship once a flaw is confirmed, ranging from routine monthly bundles to emergency out-of-band releases for actively exploited bugs. Pair this feed with CVE and zero-day to see the full disclosure-to-fix timeline.

Recent Patch items

CVE-2026-128909 Improper verification of cryptographic signature (CWE-347) in the firmware update handler of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope...
@cveNotify · Nov 13, 2026
November Patch Tuesday: How to Sort Through the Patches https://ift.tt/QgiNr31
@ctinow · Nov 13, 2026
BREAKING - Trezor confirms hidden hardware implants in 3 'Safe 5 crypto wallets' sold by former reseller CryptoBilis. The implants can steal recovery phrases and transmit them over mobile networks. A...
@thehackernews · Nov 13, 2026
Microsoft confirms Windows activation failures after November updates Microsoft has confirmed that this month's Patch Tuesday security updates are causing Windows activation and licensing failures wit...
@bleepingcomputer · Nov 13, 2026
CVE-2026-128637 The MISP Modules website component contains an open redirect vulnerability in its login endpoint. The /login route accepted a user-supplied next query parameter and passed it directly...
@cveNotify · Nov 13, 2026
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 https://ift.tt/8xhBoyw
@ctinow · Nov 13, 2026
Hackers breached 21 N-able N-central servers. 19 were already running Hotfix 2. Attackers exploited critical flaws to gain root access and deploy crypto miners. The alarming part? Hotfix 2 alone wasn'...
@thehackernews · Nov 13, 2026
Security Teams Must Shift from Patching to Mitigation in the AI Era 📔 Symantecs Dick OBrien says the rapid closure of the patch window means organizations must move beyond patching and adopt an assume...
@cibsecurity · Nov 13, 2026
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs 🖋️ Google Cloud VMs on AMD Turin chips need a guest OS patch and a stopandstart to protect against three CPU sidech...
@cibsecurity · Nov 13, 2026
CVE-2026-126570 Padloc 4.0.0 before 4.3.1 contains a prototype pollution vulnerability that allows SCIM token holders to modify Object.prototype by sending crafted SCIM PATCH paths to ScimServer._hand...
@cveNotify · Nov 12, 2026
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromis...
@bleepingcomputer · Nov 12, 2026
NEW WINDOWS ZERO-DAY EXPLOIT! A security feature designed to stop attacks can be abused to gain SYSTEM privileges. Dubbed SignDrop, the exploit targets Windows CLFS using Microsoft Defender. The code...
@thehackernews · Nov 12, 2026
CVE-2026-63983 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix packet loop on netem when duplicate is on When netem duplicates a packet it re-enqueues the copy at th...
@cveNotify · Nov 12, 2026
Citrix patches 12 security flaws, including a critical NetScaler Console authentication bypass (CVSS 9.4) that could let unauthenticated attackers access restricted resources. A separate NetScaler fla...
@thehackernews · Nov 12, 2026
CVE-2026-63825 In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch...
@cveNotify · Nov 12, 2026
CVE-2026-114469 Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size 🎖
@cveNotify · Nov 12, 2026
Chrome, Firefox Updates Patch Over 180 Vulnerabilities https://ift.tt/mk0yf16
@ctinow · Nov 12, 2026
CVE-2026-126994 A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolve_type_kwargs of the file braindecode/models/ util.py of the component Model Config Deserializ...
@cveNotify · Nov 12, 2026
ScreenConnect attackers have a new target: IT support technicians. SCKit malware exploits a patched 9.9-rated flaw and attempts to hijack technician sessions to spread across MSP customer networks. Th...
@thehackernews · Nov 12, 2026
Microsoft: Recent Windows updates cause SQL Server performance issues Microsoft has confirmed that Windows updates released since the October 2026 Patch Tuesday are causing SQL Server performance and...
@bleepingcomputer · Nov 12, 2026
CVE-2026-127046 The MISP Modules website component contains an information disclosure vulnerability in the external tools management interface. The /external_tools/list endpoint returned stored API ke...
@cveNotify · Nov 12, 2026
CVE-2026-126795 A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util....
@cveNotify · Nov 12, 2026
CVE-2001-1593 The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a...
@cveNotify · Nov 12, 2026
CVE-2026-126932 Zipline 4.6.2 before 4.8.0 contains a policy bypass vulnerability that allows authenticated users to evade administrator-disabled MIME types by editing file metadata. Attackers can upl...
@cveNotify · Nov 12, 2026
CVE-2026-31459 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm/damon/sysfs: fix memory lea...
@cveNotify · Nov 11, 2026
CVE-2026-43327 In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressing exception and cras...
@cveNotify · Nov 11, 2026
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities https://ift.tt/btIZy6G
@ctinow · Nov 11, 2026
Microsoft Patch Tuesday fixes Outlook flaw already under attack https://ift.tt/ptVQFyl
@ctinow · Nov 11, 2026
ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure https://ift.tt/W8wSPav
@ctinow · Nov 11, 2026
Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws https://securityaffairs.com/202839/hacking/microsoft-november-patch-tuesday-one-exploited-outlook-bug-and-30-wormable-...
@PentestingNews · Nov 11, 2026

Other topics

CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds: new IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches: what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.