Patch/Configuration Management

Chinese group tied to at least three other major exploits over the past few weeks.

A sophisticated threat actor was observed exploiting a security vulnerability in Fortinet FortiOS to deploy a novel memory-resident ARM64 malware known as PEERSTITCH.

New versions of the Aoki infostealer are targeting credential and session files used by popular AI coding assistants, a new report by Symantec warned.

Large companies with over $1 billion in revenue are more than twice as likely to knowingly leave high or critical vulnerabilities unpatched compared to smaller businesses.

Recent Windows updates are causing problems for non-administrator users attempting to connect to devices via Remote Desktop when the Administrator protection security feature is enabled.

Cisco confirms active exploitation of critical email gateway flaw, warns attackers can erase evidence.

A critical heap buffer overflow vulnerability in the Ghostscript interpreter, identified as CVE-2026-39919, could permit remote code execution through specially crafted PDF files.