Curated security research, vulnerabilities, advisories and tools for practitioners.

#patching

Security coverage tagged patching.

1.

1Password's AI patching benchmark is misleading

blog | 2026-09-15 11:00 | blog.trailofbits.com | original ↗ | #ai-security | #vulnerability-management | #open-source

2.

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

vulnerability | 2026-09-09 00:00 | CVE-2026-19490 | bishopfox.com | original ↗ | #authentication-bypass | #citrix | #netscaler

3.

StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

advisory | 2026-09-07 00:00 | aikido.dev | original ↗ | #rce | #zero-day | #patching

4.

Stop breaking SLAs: how to patch vulnerabilities before the fix even ships

blog | 2026-09-04 00:00 | aikido.dev | original ↗ | #ai-security | #vulnerability-management | #remediation

5.

Software supply chain security requires decisions rather than defaults

blog | 2026-08-26 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #dependency-management

6.

XSS2Shell: WordPress pre-auth XSS to RCE chain (CVE-2026-64638)

vulnerability | High | 2026-08-07 15:25 | CVE-2026-64638 | pwn.ai | original ↗ | #ai-security | #rce | #public-poc

7.

The upgrade trap: when upgrading is the wrong answer to a CVE

blog | 2026-07-20 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #open-source

8.

How Two WordPress Core Bugs Chained into Pre-Auth RCE

research | 2026-07-18 00:00 | bugbunny.ai | original ↗ | #rce | #vulnerability-research | #attack-chains

9.

Aikido acquires Root to secure the supply chain

blog | 2026-06-30 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #open-source

10.

Mythos Preview: What Every CISO Should Do Now

blog | 2026-06-25 00:00 | tenzai.com | original ↗ | #ai-security | #incident-response | #offensive-security

11.

Introducing Patch the Planet

blog | 2026-06-22 16:50 | blog.trailofbits.com | original ↗ | #ai-security | #supply-chain | #vulnerability-management

12.

AI Threat Readiness Pillar 2: Accelerate Patching and Response

blog | 2026-06-09 15:25 | wiz.io | original ↗ | #ai-security | #vulnerability-management | #remediation

13.

5 Ways to Reduce your Cloud Attack Surface

blog | 2026-06-01 12:00 | bugcrowd.com | original ↗ | #cloud | #cloud-security | #attack-surface

14.

Vulnerability Management Lifecycle

blog | 2026-03-02 14:53 | bugcrowd.com | original ↗ | #zero-day | #vulnerability-management | #remediation

15.

MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know

vulnerability | 2025-12-28 09:24 | CVE-2025-14847 | wiz.io | original ↗ | #cloud | #memory-safety | #information-disclosure

16.

Arista NextGen Firewall XSS to RCE Chain

blog | 2025-12-04 00:00 | CVE-2025-6980 | bishopfox.com | original ↗ | #rce | #xss | #patching

17.

Zero-Click Exploits

blog | 2025-10-24 00:00 | netlas.io | original ↗ | #whatsapp | #mobile-security | #patching

18.

When Patches Fail: An Analysis of Patch Bypass and Incomplete Security

blog | 2025-10-17 00:00 | netlas.io | original ↗ | #vulnerability-management | #sharepoint | #patch-bypass

19.

Building Effective LLM Agents | AI Cyber Challenge

research | 2025-08-08 19:28 | theori.io | original ↗ | #ai-security | #patching | #vulnerability-detection

20.

What is CVE-2025-53770? A Critical Microsoft SharePoint Vulnerability and How to Respond

vulnerability | Critical | Actively exploited | 2025-07-23 19:49 | CVE-2025-53770 | hackerone.com | original ↗ | #active-exploitation | #rce | #microsoft

21.

Tomcat CVE-2025-24813: What You Need to Know

vulnerability | 2025-03-18 00:00 | CVE-2025-24813 | bishopfox.com | original ↗ | #rce | #deserialization | #vulnerability

22.

Your Client Requires NIS2 Vulnerability Patching. Now What?

vulnerability | 2025-01-14 00:00 | aikido.dev | original ↗ | #vulnerability-management | #compliance | #nis2

23.

Critical vulnerabilities in Palo Alto Expedition: everything you need to know

blog | 2024-10-10 17:45 | wiz.io | original ↗ | #rce | #vulnerability | #patching

24.

RCE vulnerability in OpenSSH: everything you need to know

vulnerability | 2024-07-01 13:49 | CVE-2024-6387 | wiz.io | original ↗ | #rce | #linux | #vulnerability

25.

Critical RCE vulnerability in PHP CGI: everything you need to know

vulnerability | 2024-06-10 17:08 | CVE-2024-4577 | wiz.io | original ↗ | #rce | #php | #ransomware

26.

Wiz achieves Red Hat Vulnerability Scanner Certification

tool | 2024-05-20 13:03 | wiz.io | original ↗ | #cloud-security | #certification | #container-security

27.

CVE-2024-4040 exploited in the wild: everything you need to know

vulnerability | 2024-04-24 16:15 | CVE-2024-4040 | wiz.io | original ↗ | #rce | #vulnerability | #patching

28.

CVE-2023-38545 high severity vulnerability in cURL: everything you need to know

vulnerability | 2023-10-11 16:56 | CVE-2023-38545 | wiz.io | original ↗ | #cloud-security | #vulnerability | #patching

29.

Critical and high severity Exim vulnerabilities: everything you need to know

vulnerability | 2023-10-02 13:53 | CVE-2023-42115 | wiz.io | original ↗ | #rce | #vulnerability | #patching

30.

Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)

vulnerability | 2022-06-06 20:20 | CVE-2022-26134 | hackerone.com | original ↗ | #rce | #zero-day | #patching