patching news
6 stories
The patch window is collapsing: Why security needs a new control plane
A recent report highlights a significant shift in the cybersecurity landscape: the traditional patch management window is rapidly collapsing. This shrinking timeframe between the discovery of a vulnerability and its effective remediation is creating an increasingly critical attack surface for organizations. The analysis suggests that current security strategies are struggling to keep pace,…
Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?
The cybersecurity community is grappling with an unprecedented surge in software vulnerability discoveries, largely driven by advancements in artificial intelligence. This rapid increase has prompted the U.S. government to establish Gold Eagle, a new clearinghouse designed to coordinate research, mitigation, and fixes for vulnerabilities. The scale of the problem is evident in recent Microsoft…
Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws
Adobe has issued an urgent advisory, urging users to immediately patch critical security vulnerabilities identified in its ColdFusion and Campaign Classic products. The company has released security updates to address these flaws, which pose significant risks to affected systems.
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
N-able has issued Hotfix 2 for its N-central platform in response to an actively exploited zero-day vulnerability. The company confirmed that attackers leveraged this flaw to achieve administrative access on managed systems and establish persistence. This activity prompted the release of the hotfix, alongside additional guidance for affected customers.
Critical RCE Vulnerability in WordPress Core Affects Millions of Sites
A critical unauthenticated remote code execution vulnerability, identified as CVE-2026-63030, has been discovered in WordPress Core, affecting millions of websites globally. The vulnerability allows an attacker to execute arbitrary code without authentication through the WordPress REST API batch endpoint, potentially leading to a complete compromise of the affected website and its data.
Oracle Releases June Patch Update Addressing 243 Vulnerabilities
Oracle has issued its June Critical Security Patch Update, resolving 243 unique CVEs with 245 security patches. A significant portion, 122 patches, are rated as critical severity. The Oracle Fusion Middleware product family received the largest number of fixes, with 106 patches.