patch tuesday

8 articles · newest first

A person typing on a laptop in a dark room, representing a cyberattack

North Korea hid a Windows zero-day inside fake job offers for five weeks

Lazarus used a bug in a core Windows driver to grab SYSTEM access and disable antivirus — Microsoft patched it Tuesday, weeks after North Korea started using it.

Priya Nair · 2d ago · 7 min

Rows of server racks in a data center, representing the enterprise SharePoint infrastructure exposed by CVE-2026-63520

Software

an AI spent 24 days hacking SharePoint. it found a way in that needs zero login

Rapid7 pointed an agentic AI at Microsoft's code for 120 hours across 24 days — and it built the same kind of exploit chain nation-state hackers used to spend months on.

Priya Nair · 2d ago · 6 min

Cloud server infrastructure representing Microsoft Azure services patched for critical vulnerabilities

Software

Microsoft just fixed three perfect-10 bugs in Azure and Teams — five days before Patch Tuesday

Three CVSS 10.0 vulnerabilities in Planetary Computer Pro, Azure SQL Database, and Teams got quietly patched on August 6 — completely outside Microsoft's scheduled August 11 Patch Tuesday.

Priya Nair · 6d ago · 6 min

Rows of enterprise server racks in a data center, representing Active Directory infrastructure exposed by the Certighost vulnerability

Software

Any employee's login can now become domain admin — and the exploit code is already public

A low-privileged Active Directory account is all it takes to forge a Domain Controller certificate — Microsoft patched it in July, and a working exploit just landed on GitHub.

Priya Nair · Aug 1 · 6 min

NVD detail for CVE-2026-56188 showing a Windows Server network driver RCE

Software

a 9.8 in a Windows Server network driver lets an attacker run code with nothing but network traffic

CVE-2026-56188 is a race condition in a core Windows Server network driver that an unauthenticated attacker can exploit remotely. It affects every supported Windows Server. Patch it.

Priya Nair · Jul 30 · 9 min

NVD detail for CVE-2026-60198 showing a 9.8 CRITICAL Oracle WebLogic RCE

Software

Oracle just patched five separate 9.8 bugs that hand WebLogic to an anonymous attacker. patch all of them

CVE-2026-60198 and four siblings let an unauthenticated attacker take over Oracle WebLogic Server over T3, IIOP, HTTP or SOAP. Five critical holes, one July patch — here's what to do.

Priya Nair · Jul 28 · 9 min

An IT professional with a laptop beside enterprise server racks

Software

there's an unauthenticated 9.8 in Windows RDP. we've seen how this movie ends — patch before the sequel

CVE-2026-56190 lets an attacker run code on a Windows machine over Remote Desktop with no login and no clicks. It's the same profile as BlueKeep — the RDP bug that became a worm. It isn't exploited yet. 'Yet' is the word to act on.

Priya Nair · Jul 28 · 7 min

Software

the Windows Print Spooler is a security hole again. if your servers don't print, just turn it off

CVE-2026-58608 is a fresh remote code execution flaw in the same Windows service that gave us PrintNightmare. It's on by default on virtually every Windows machine — and most servers have no reason to run it at all.

Priya Nair · Jul 24 · 7 min