Patch/Configuration Management

The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.

The bug caused Windows Defender quick or full scans to fail, sometimes requiring the service to be restarted.

WMIC, a legacy command-line utility for interacting with Windows Management Instrumentation (WMI), has been progressively phased out.

Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.

CISA warns of active Progress LoadMaster attacks; patch and investigate now.

As reported by Security Affairs, a 13-year-old Linux kernel flaw named OVSwrap was disclosed, enabling local users to gain root privileges on many default-configured distributions utilizing Open vSwitch.

Patched Azure Cosmos DB bug threatened Microsoft and customer databases.

As noted by The Hacker News, OpenWrt released version 24.10.8 to address a critical DHCPv6 stack overflow vulnerability (CVE-2026-53921) and a range of other remotely triggerable flaws in its network services.