Patch/Configuration Management

Experts warn that the timeframe between disclosure and exploitation will continue to shrink, so teams must prepare.

U.S. computer software and services provider PTC has alerted that potential exploitation of a critical flaw in its product lifecycle management solutions FlexPLM and Windchill via trusted data deserialization could result in remote code execution, reports BleepingComputer.

Keynotes from Splunk and the SANS Institute reinforce the double-edged nature of AI.

Experts expect memory leak vulnerability exploitation once code becomes public.

CVE-2026-33017 could enable an unauthenticated attacker to execute arbitrary Python code on the server.

Intrusions exploiting the high-severity stored cross-site scripting flaw in Zimbra Collaboration, tracked as CVE-2025-66376, have been launched against Ukraine by a Russian advanced persistent threat operation suspected to be APT28, also known as Fancy Bear, Sofacy Group, BlueDelta, and STRONTIUM, according to Security Affairs.

The most severe vulnerability, tracked as CVE-2026-22557, impacts UniFi Network application versions 10.1.85 and earlier.