security update

Google fixes actively exploited Android vulnerability (CVE-2025-48595)

June 2, 2026

Google has announced the June 2026 Android security updates, which fix a bucketload of vulnerabilities, including a high-severity vulnerability (CVE-2025-48595) in the Android …

Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)

May 26, 2026

A relative directory path traversal vulnerability (CVE-2026-34926) in Trend Micro’s Apex One platform has been exploited in zero-day attacks, the company confirmed. …

High-severity SharePoint RCE bug patched by Microsoft (CVE-2026-45659)

May 26, 2026

Microsoft has released patches for a high-severity remote code execution vulnerability (CVE-2026-45659) in SharePoint that may be exploited in low-complexity attacks. It …

Debian 13.5 point release lands with security fixes, bug patches

May 18, 2026

Debian 13.5 is the fifth point release for the stable distribution “trixie.” The update folds in roughly 100 Debian Security Advisories and corrections for more …

Android pushes new scam, theft, and AI protections in 2026 update wave

May 13, 2026

Phone scammers spoofing bank caller IDs have driven an estimated $980 million in annual losses worldwide, according to Europol. Android’s 2026 security roadmap takes …

Oracle rolls out monthly security patch updates

May 5, 2026

Oracle is changing how its security fixes are delivered: starting in May 2026, there will be a monthly Critical Security Patch Update. “Each [monthly] CSPU is smaller …

Critical MOVEit Automation auth bypass vulnerability fixed (CVE-2026-4670)

May 4, 2026

Progress Software has fixed a critical authentication bypass (CVE-2026-4670) and a privilege escalation (CVE-2026-5174) vulnerability in MOVEit Automation, exploitation of …

ChatGPT advanced account security adds passkeys and hardware keys

May 4, 2026

Journalists, elected officials, researchers, and political dissidents have spent years adapting their accounts to phishing-resistant authentication on consumer platforms. …

cPanel zero-day exploited for months before patch release (CVE-2026-41940)

April 30, 2026

A critical authentication bypass vulnerability (CVE-2026-41940) in cPanel, a popular web-based control panel for managing web hosting accounts, is being exploited by attackers …

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876)

April 22, 2026

Progress Software has fixed a slew of high-severity vulnerabilities in MOVEit WAF and LoadMaster, including a flaw (CVE-2026-21876) that may allow attackers to bypass firewall …

Fortinet fixes critical FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808)

April 16, 2026

Two vulnerabilities (CVE-2026-39813, CVE-2026-39808) in FortiSandbox could be leveraged by unauthenticated attackers to bypass authentication and execute unauthorized code or …

Tails 7.6.2 patches vulnerability that could expose saved files