Patch Management

9 articles

NewsTechnology, Cloud & SaaSMedium
Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server
Enterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
Aisha Noor14 Sep 2026, 11:00 IST5 min read
ThreatsRetail & E-commerceBreaking
Adobe warns of exploited Commerce and Magento RCE — patch CVE-2026-75650 now
Adobe says attackers are exploiting a critical, unauthenticated Commerce and Magento flaw. Merchants should apply the vendor hotfix and rotate exposed secrets.
Priya Raman13 Sep 2026, 09:53 IST6 min read
ThreatsTechnology, Cloud & SaaSHigh
PaperCut issues superseding maintenance releases as attackers deploy AI agent swarms against 440+ servers
PaperCut shipped consolidated maintenance updates after automated AI agent swarms compromised over 440 print management servers, bypassing earlier emergency hotfixes.
Daniel Okafor11 Sep 2026, 16:30 IST6 min read
InsightsGovernment & Defence
CISA BOD 26-04 ends CVSS-ordered patching: the four questions that replace it
CISA's Binding Operational Directive 26-04 drops CVSS from federal patch prioritisation, replacing it with four yes/no questions and a sixteen-row deadline table.
Priya Raman11 Sep 2026, 13:45 IST7 min read
ThreatsTechnology, Cloud & SaaSCritical
FortiClient EMS CVE-2026-35616: the hotfix window was not the dangerous part
Fortinet's emergency hotfix for CVE-2026-35616 blocked the attack path without fixing the flaw, and the complete patch that followed needed its own re-release.
Priya Raman10 Sep 2026, 21:50 IST6 min read
ThreatsTechnology, Cloud & SaaSHigh
LiteLLM and Kestra in KEV: exploited AI tooling is now a vulnerability management problem
CISA added 15 CVEs to the KEV catalog in six working days, including exploited flaws in LiteLLM and Kestra — AI tooling that most asset inventories never see.
Daniel Okafor10 Sep 2026, 20:30 IST6 min read
GuidesTechnology, Cloud & SaaS
Playbook: surviving a 900-CVE Patch Tuesday without breaking your change process
A repeatable triage model for very large monthly releases — what to expedite, what to schedule, and how to prove coverage afterwards.
Priya Raman10 Sep 2026, 01:30 IST8 min read
GuidesIndustrial, OT & IoT
Playbook: hardening the edge appliance you cannot put an agent on
Two of this year’s fastest CISA remediation deadlines hit devices that cannot run EDR. A practical checklist for the class attackers reach for first.
Aisha Noor8 Sep 2026, 17:30 IST7 min read
ThreatsTechnology, Cloud & SaaSHigh
Enterprise app CVE roundup: PeopleSoft, cPanel, Artifactory and Switchvox all need attention
Four high-severity vulnerabilities in widely deployed enterprise software — including a build-artefact repository that sits directly in the software supply chain.
Priya Raman4 Sep 2026, 16:00 IST6 min read