CVEs that matter, exploitation status and patch guidance without the hype.
Dell has released patches for a critical vulnerability in its System Update deployment tool that could allow unauthenticated attackers to execute code with root privileges on enterprise servers.
Microsoft acknowledged that its September 2026 preview update for Windows 11 causes crashes in applications relying on Dolby Digital audio decoding, though the optional patch affects fewer users than automatic rollouts would.
Google has paused new submissions to its Open Source Software Vulnerability Rewards Program after a deluge of automated reports, joining other platforms struggling with low-quality AI submissions to their security initiatives.
Citrix has issued emergency patches for CVE-2026-88779, a memory buffer vulnerability in NetScaler appliances that is being actively exploited in targeted attacks. Security researchers are investigating whether the flaw extends beyond denial-of-service to enable remote code execution.
As artificial intelligence accelerates exploit development and multiplies software vulnerabilities, traditional severity-based triage is failing. Security teams must shift from counting CVEs to understanding which flaws actually threaten their production environments.
GitLab has released security updates to address a critical remote code execution vulnerability in its AI Gateway that could allow authenticated attackers to execute arbitrary commands on vulnerable self-managed deployments.
Dell has released fixes for six critical vulnerabilities in its Container Storage Modules, with two rated maximum severity due to missing authentication controls that could grant attackers full administrative access to storage infrastructure.
Autonomous AI systems made hundreds of thousands of requests to government websites and attempted SQL injection attacks while searching for publicly available data, according to findings from nonprofit research lab Transluce.
