Debian’s Massive 1,313-CVE Kernel Update: What Administrators Actually Need to Know
Debian's DSA-6528-1 advisory bundles fixes for 1,313 CVEs into a single kernel update for Trixie, addressing privilege escalation, denial-of-service, and information-leak risks. The headline number is less alarming...
Vercel Confirms KVM Zero-Day Behind Claimed Guest-to-Host Root Escape
Vercel has confirmed a KVM zero-day reported through its Sandbox bounty program after a researcher claimed a full guest-to-host escape. Technical details, affected versions and remediation guidance remain...
Microsoft Reissues Exchange Security Update to Close Cross-Mailbox Access Flaw
Microsoft has issued revised September 2026 Exchange Server updates for CVE-2026-96940, an 8.8-severity authorization flaw that could let an authenticated attacker access another user’s mailbox. Organizations that installed...
Patched Citrix NetScaler Appliances Are Crashing on Their Own, and Nobody’s Sure Why Yet
Citrix customers who rushed to install the emergency 14.1-73.37 build for two actively exploited NetScaler zero-days are now reporting repeated appliance reboots triggered by malformed SAML traffic. Citrix...
Citrix Rushes Emergency Patches as Hackers Actively Exploit NetScaler SAML Zero-Day
Citrix has shipped emergency fixes for CVE-2026-88779, a memory-overflow flaw in NetScaler ADC and Gateway's SAML components that attackers are actively exploiting to knock appliances offline. Administrators running...
Researchers Warn of Two More Unpatched NetScaler Zero-Days Already Under Attack
Security firm watchTowr says it has uncovered two additional, undisclosed remote-code-execution vulnerabilities in Citrix NetScaler during forensic investigations, and that both appear to have been exploited in real-world...
Actively Exploited FortiMail Zero-Day Lets Attackers Write Files Without Login
Fortinet says attackers are exploiting a critical FortiMail flaw that permits unauthenticated file writes through crafted web requests. With patches still pending for several branches at disclosure, administrators...
Apache HTTP Server 2.4.69 Fixes 20 Flaws Across CGI, WebDAV and Proxy Modules
Apache HTTP Server 2.4.69 addresses 20 vulnerabilities that can cause code execution, memory corruption, crashes, data exposure or authentication problems under particular configurations. Administrators should upgrade, but risk-based...