CVEs that matter, exploitation status and patch guidance without the hype.
Microsoft is urging customers to migrate away from Windows 11 23H2 Enterprise, Education, and IoT Enterprise before security updates end next month. The company is rolling out Windows 11 26H2 as the replacement.
Anthropic's OSS Scanner harnesses Claude to identify vulnerabilities in open source at scale, but the bottleneck has shifted from detection to remediation, with maintainers struggling to keep pace.
Attackers are chaining two unpatched vulnerabilities in AhsayCBS backup software to breach organizations and deploy cryptocurrency miners and webshells, affecting at least five targets as of early October.
Security researchers have detected real-world attacks targeting CVE-2026-102255, a maximum-severity flaw in SonicWall SMA1000 appliances, within days of the company's Tuesday patch release.
Microsoft is warning that devices running outdated Windows editions will lose access to Windows Update services once security certificates expire in mid-2027, unless administrators and users upgrade to supported versions beforehand.
A new remote code execution vulnerability in NetScaler ADC and Gateway appliances requires urgent patching, though Citrix says no active exploitation has been detected yet.
GitHub's security team profiles @vaib25vicky, a leading researcher in their VIP bug bounty program, discussing how they identify authorization flaws and approach feature testing.
Cisco disclosed five critical vulnerabilities in NX-OS affecting Nexus 3000 and 9000 Series switches that could allow attackers to execute arbitrary code with root privileges or trigger denial-of-service conditions.
