Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Microsoft's Windows Production PCA 2011 Secure Boot certificate expires on October 19, 2026. PCs keep booting, but only devices with Windows UEFI CA 2023 keep getting boot manager fixes.
OpenSSL 3.4 gets no more fixes after October 22, 2026, and 3.6 follows on November 1. Here are the support dates for every branch and why 3.5 LTS is the safe upgrade target.
Dell has released patches for a critical vulnerability in its System Update deployment tool that could allow unauthenticated attackers to execute code with root privileges on enterprise servers.
South Korea's Financial Services Commission convened an emergency session after cyberattacks struck multiple major banks, including Shinhan Bank and Kookmin Bank, with evidence pointing toward AI-driven attack methods.
U.S. authorities have apprehended the alleged creator of Ploutus, a malware strain deployed in jackpotting attacks that drained over $5 million from financial institutions across the country.
Microsoft acknowledged that its September 2026 preview update for Windows 11 causes crashes in applications relying on Dolby Digital audio decoding, though the optional patch affects fewer users than automatic rollouts would.
Google has paused new submissions to its Open Source Software Vulnerability Rewards Program after a deluge of automated reports, joining other platforms struggling with low-quality AI submissions to their security initiatives.
Citrix has issued emergency patches for CVE-2026-88779, a memory buffer vulnerability in NetScaler appliances that is being actively exploited in targeted attacks. Security researchers are investigating whether the flaw extends beyond denial-of-service to enable remote code execution.
