Curated security research, vulnerabilities, advisories and tools for practitioners.

#patching

Security coverage tagged patching.

1.

PHP2Shell: finding and patching affected PHP

research | 2026-10-22 11:11 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #vulnerability-research | #php

2.

The Year the Vulnerability Backlog Changed Shape

blog | 2026-10-02 19:11 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #vulnerability-management

3.

The New Rules of Patching: When a Fix Becomes a Blueprint for Attackers

blog | 2026-09-28 19:39 | jfrog.com | Original ↗ | .md | #ai-security | #vulnerability-management | #jfrog

4.

1Password's AI patching benchmark is misleading

blog | 2026-09-15 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #vulnerability-management | #open-source

5.

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

vulnerability | 2026-09-09 00:00 | CVE-2026-19490 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #citrix | #netscaler

6.

StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

advisory | 2026-09-07 00:00 | aikido.dev | Original ↗ | .md | #rce | #zero-day | #patching

7.

Stop breaking SLAs: how to patch vulnerabilities before the fix even ships

blog | 2026-09-04 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #vulnerability-management | #remediation

8.

Software supply chain security requires decisions rather than defaults

blog | 2026-08-26 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #appsec | #dependency-management

9.

XSS2Shell: WordPress pre-auth XSS to RCE chain (CVE-2026-64638)

vulnerability | High | 2026-08-07 15:25 | CVE-2026-64638 | pwn.ai | Original ↗ | .md | #ai-security | #rce | #public-poc

10.

The upgrade trap: when upgrading is the wrong answer to a CVE

blog | 2026-07-20 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source

11.

How Two WordPress Core Bugs Chained into Pre-Auth RCE

research | 2026-07-18 00:00 | bugbunny.ai | Original ↗ | .md | #rce | #vulnerability-research | #attack-chains

12.

Aikido acquires Root to secure the supply chain

blog | 2026-06-30 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source

13.

Mythos Preview: What Every CISO Should Do Now

blog | 2026-06-25 00:00 | tenzai.com | Original ↗ | .md | #ai-security | #incident-response | #offensive-security

14.

Introducing Patch the Planet

blog | 2026-06-22 16:50 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #supply-chain | #vulnerability-management

15.

AI Threat Readiness Pillar 2: Accelerate Patching and Response

blog | 2026-06-09 15:25 | wiz.io | Original ↗ | .md | #ai-security | #vulnerability-management | #remediation

16.

5 Ways to Reduce your Cloud Attack Surface

blog | 2026-06-01 12:00 | bugcrowd.com | Original ↗ | .md | #cloud | #cloud-security | #attack-surface

17.

CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways

vulnerability | 2026-03-10 00:00 | CVE-2025-26399 | netspi.com | Original ↗ | .md | #rce | #deserialization | #patching

18.

Vulnerability Management Lifecycle

blog | 2026-03-02 14:53 | bugcrowd.com | Original ↗ | .md | #zero-day | #vulnerability-management | #remediation

19.

Security update available for Metabase - Please upgrade now

blog | 2026-02-19 12:10 | metabase.com | Original ↗ | .md | #ai-security | #cloud | #information-disclosure

20.

CVE-2026-1731 – BeyondTrust RCE Overview and Takeaways

vulnerability | 2026-02-12 00:00 | CVE-2026-1731 | netspi.com | Original ↗ | .md | #rce | #patching | #command-injection

21.

MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know

vulnerability | 2025-12-28 09:24 | CVE-2025-14847 | wiz.io | Original ↗ | .md | #cloud | #memory-safety | #information-disclosure

22.

CVE-2025-55182: Unauthenticated React Exploit Affects Millions of Sites

vulnerability | Critical | Actively exploited | 2025-12-05 20:50 | CVE-2025-55182 | hackerone.com | Original ↗ | .md | #rce | #threat-intelligence | #vulnerability

23.

Arista NextGen Firewall XSS to RCE Chain

blog | 2025-12-04 00:00 | CVE-2025-6980 | bishopfox.com | Original ↗ | .md | #rce | #xss | #patching

24.

Zero-Click Exploits

blog | 2025-10-24 00:00 | netlas.io | Original ↗ | .md | #whatsapp | #mobile-security | #patching

25.

When Patches Fail: An Analysis of Patch Bypass and Incomplete Security

blog | 2025-10-17 00:00 | netlas.io | Original ↗ | .md | #vulnerability-management | #sharepoint | #patch-bypass

26.

Building Effective LLM Agents | AI Cyber Challenge

research | 2025-08-08 19:28 | theori.io | Original ↗ | .md | #ai-security | #patching | #vulnerability-detection

27.

What is CVE-2025-53770? A Critical Microsoft SharePoint Vulnerability and How to Respond

vulnerability | Critical | Actively exploited | 2025-07-23 19:49 | CVE-2025-53770 | hackerone.com | Original ↗ | .md | #active-exploitation | #rce | #microsoft

28.

Tomcat CVE-2025-24813: What You Need to Know

vulnerability | 2025-03-18 00:00 | CVE-2025-24813 | bishopfox.com | Original ↗ | .md | #rce | #deserialization | #vulnerability

29.

Your Client Requires NIS2 Vulnerability Patching. Now What?

vulnerability | 2025-01-14 00:00 | aikido.dev | Original ↗ | .md | #vulnerability-management | #compliance | #nis2

30.

Critical vulnerabilities in Palo Alto Expedition: everything you need to know

blog | 2024-10-10 17:45 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #patching