SectionVulnerabilities
Patches, advisories and the CVEs behind them.
Microsoft 365 outage disrupts Outlook, Teams, and Copilot worldwide
Microsoft is investigating a widespread Microsoft 365 outage that has disrupted Outlook, Teams, Copilot, and other services, with the company attributing the…
Critical Apache HTTP/2 Flaw Allows Unauthenticated Remote Code Execution
A critical vulnerability in Apache HTTP Server's mod_http2 module, tracked as CVE-2026-119618, could let an unauthenticated remote attacker execute code on affected…
eMudhra Revokes 8 More CA Certificates After Private Key Handling Failure
eMudhra has revoked eight additional intermediate CA certificates, bringing the total affected to 16, after an investigation traced weak and improperly handled…
Microsoft Fixes Exchange Sign-In Failures Caused by October Windows Server Updates
Microsoft has resolved Outlook on the web sign-in and mail delivery problems on on-premises Exchange servers that followed the October 2026 Windows…
November Patch Tuesday Brings Actively Exploited Outlook Zero-Day and Wave of Critical Bugs
Microsoft's November security update includes an Outlook zero-day under active exploitation, alongside a large batch of critical flaws in Exchange, SharePoint, Windows…
York University breach exposed personal data from website forms dating to 2007
York University in Toronto confirmed an attacker accessed personal information submitted through online departmental forms, including government ID and health data, with…
Microsoft Paint RCE Fix Ships Through Microsoft Store, Not Windows Update
A remote code execution flaw in Windows Paint, tracked as CVE-2026-83844, has been patched, but the fix reaches users only via a…
D-Link warns of unpatched zero-days in DGS-3130 Series switches
D-Link has published interim mitigations for several unpatched flaws in its DGS-3130 managed switches, which could expose device data, enable configuration changes,…
Veeam Software Appliance VMs fail to boot on certain AMD EPYC hosts
Veeam has warned that its Linux-based Software Appliance virtual machines can crash with a kernel panic on some AMD EPYC processors due…
DigiCert Discloses Data Breach Exposing Business Customer Records
Certificate authority DigiCert says an internal business system moved outside its VPN was accessed by an outsider, exposing customer identity documents. Its…
SonicWall Warns of SSL-VPN SAML Auth Bypass Flaw Exploited in Attacks
SonicWall has patched seven SonicOS vulnerabilities, including CVE-2026-19868, an SSL-VPN authentication bypass that CISA confirms is being exploited in the wild. Affected…
Perry Johnson Companies Settles With Four States Over 2023 Patient Data Breach
A medical services subsidiary agreed to a $300,000 settlement and mandated security reforms after an attacker exploited a single employee credential to…