#patchnow

@offseq.bsky.social

1 hour ago

CVE-2026-4169: Cross Site Scripting in Tecnick TCExam CVE-2026-4169 is a cross-site scripting vulnerability identified in the Tecnick TCExam application, affecting versions 16.0 through 16.6.0. The vulnerability resides in the F_xml_export_users function of the admin/code/tce_xml_users.php fil

Tecnick TCExam (16.0 – 16.6.0) hit by MEDIUM XSS (CVE-2026-4169) in XML export. Admins: upgrade to 16.6.1, restrict admin access, & audit logs. Details: radar.offseq.com/threat/cve-2026-4169-cro... #OffSeq #XSS #PatchNow

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

1 day ago

Critical SQLi Bug Hits Ally Plugin Sites
Read More: buff.ly/O6ZOGn0

#CVE20262413 #WordPressSecurity #SQLInjection #AllyPlugin #WebAppSecurity #CriticalVulnerability #PatchNow #InfosecAlert

0 0 0 0

Commonwealth Sentinel Cyber Security

@cwealthsentinel.bsky.social

1 day ago

Google rushes Chrome update to fix zero-days under attack : Skia graphics lib and V8 JavaScript engine brings browser's tally of actively exploited bugs to three in 2026

Google rushes Chrome update fixing two zero-days already under attack buff.ly/JcjGOQN

#PatchNow #Patch #CriticalPatch #PatchManagement #SoftwarePatch #BugFix #CyberSecurity #ITSecurity #SecurityUpdate

0 0 0 0

Yazoul - Cybersecurity Alerts

@yazoul-alerts.bsky.social

2 days ago

🚨 30 million records. One dark web post. Allegedly from Ticketek.

www.yazoul.net/intel/claim/2026-03-12-t...

#CyberSecurity #PatchNow

0 0 0 0

Commonwealth Sentinel Cyber Security

@cwealthsentinel.bsky.social

2 days ago

WordPress Security Release 6.9.4 Fixes Issues 6.9.2 Failed To Address WordPress releases an additional security release 6.9.4 to fix vulnerabilities previous update 6.9.2 failed to address

WordPress Security Release 6.9.4 Fixes Issues 6.9.2 Failed To Address via @sejournal, @martinibuster buff.ly/bQ9joas

#PatchNow #Patch #CriticalPatch #PatchManagement #SoftwarePatch #BugFix #CyberSecurity #ITSecurity #SecurityUpdate

0 0 0 0

Commonwealth Sentinel Cyber Security

@cwealthsentinel.bsky.social

2 days ago

CISA says n8n critical bug exploited in real-world attacks : No rest for project maintainers battered by slew of vulnerability disclosures

CISA warns max-severity n8n bug is being exploited in the wild buff.ly/uyG6F48

#PatchNow #Patch #CriticalPatch #PatchManagement #SoftwarePatch #BugFix #CyberSecurity #ITSecurity #SecurityUpdate

0 0 0 0

Commonwealth Sentinel Cyber Security

@cwealthsentinel.bsky.social

2 days ago

Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit Apple backports CVE-2023-43010 WebKit fix after Coruna exploit kit abused iOS flaws, protecting older iPhones and iPads from memory corruption attacks

Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit buff.ly/3G9FqQC

#PatchNow #Patch #CriticalPatch #PatchManagement #SoftwarePatch #BugFix #CyberSecurity

0 0 0 0

Yazoul - Cybersecurity Alerts

@yazoul-alerts.bsky.social

2 days ago

Why are attackers still exploiting a vulnerability from 2021?

www.yazoul.net/news/news/cisa-flags-sol...

#CyberSecurity #PatchNow

0 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

3 days ago

Ivanti patches critical DSM vulnerability (CVE-2026-3483) allowing privilege escalation. Update to version 2026.1.1 now to secure your systems. #CyberSecurity #Ivanti #DSM #PatchNow Link: thedailytechfeed.com/ivanti-patch...

0 0 0 0

Yazoul - Cybersecurity Alerts

@yazoul-alerts.bsky.social

3 days ago

⚠️ Unverified claim: 6 million customer records allegedly for sale from a major telecom.

https://www.yazoul.net/intel/claim/189826

#CyberSecurity #PatchNow

0 0 0 0

Offensive Sequence

@offseq.bsky.social

4 days ago

CVE-2026-28806: CWE-285 Improper Authorization in nerves-hub nerves_hub_web CVE-2026-28806 is an improper authorization vulnerability (CWE-285) found in the nerves_hub_web component of the nerves-hub project, affecting versions from 1.0.0 up to but not including 2.4.0. The vulnerability arises due to missing author

CRITICAL in nerves_hub_web ≤2.3.x: Authenticated users can hijack devices/orgs via improper authorization. Upgrade to 2.4.0+ now & review access controls. radar.offseq.com/threat/cve-2026-28806-cw... #OffSeq #IoTSecurity #PatchNow

0 0 0 0

Jim Guckin

@jimguckin.bsky.social

4 days ago

CISA shortens patch deadline for critical Ivanti, SolarWinds bugs The Cybersecurity and Infrastructure Security Agency (CISA) gave all federal civilian agencies until Thursday to patch CVE-2025-26399 — a critical vulnerability impacting the popular SolarWinds Web...

CISA added Ivanti, SolarWinds, and Workspace ONE vulnerabilities to the KEV list after confirmed exploitation in the wild.

When a vuln hits KEV, attackers are already using it.

Time to patch immediately!

therecord.media/cisa-shorten...

#CyberSecurity #ThreatIntel #PatchNow

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

4 days ago

CISA Flags Actively Exploited Vulns
Read More: buff.ly/a2jxTD9

#CISAKEV #ActivelyExploited #Omnissa #SolarWinds #Ivanti #VulnerabilityManagement #PatchNow #RansomwareRisk

0 0 0 0

Offensive Sequence

@offseq.bsky.social

5 days ago

CVE-2026-30869: CWE-22: Improper Limitation of a Pathname to a Restricted Direct CVE-2026-30869 is a path traversal vulnerability categorized under CWE-22 affecting the SiYuan knowledge management system before version 3.5.10. The flaw resides in the /export endpoint, where insufficient validation of pathname inputs all

🚨 SiYuan < 3.5.10 hit by CRITICAL path traversal bug — attackers can read secrets via /export, no auth needed. Upgrade to 3.5.10+ ASAP & restrict endpoint access! radar.offseq.com/threat/cve-2026-30869-cw... #OffSeq #CVE202630869 #patchnow

0 0 0 0

Offensive Sequence

@offseq.bsky.social

1 week ago

CVE-2026-3703: Out-of-bounds Write in Wavlink NU516U1 CVE-2026-3703 is a critical security vulnerability identified in the Wavlink NU516U1 router firmware version 251208. The vulnerability is an out-of-bounds write occurring in the function sub_401A10 within the /cgi-bin/login.cgi script. The

Wavlink NU516U1 (v251208) faces a CRITICAL vuln (CVE-2026-3703): remote out-of-bounds write via /cgi-bin/login.cgi. Public exploit out — upgrade firmware now! radar.offseq.com/threat/cve-2026-3703-out... #OffSeq #Vulnerability #PatchNow

1 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

1 week ago

Critical vulnerability CVE-2026-23600 in HPE AutoPass License Server allows remote authentication bypass. Upgrade to version 9.19+ immediately! #CyberSecurity #HPE #Vulnerability #PatchNow Link: thedailytechfeed.com/hpe-autopass...

0 0 0 0

Hackread.com

@hackread.bsky.social

1 week ago

Cisco Patches 48 Firewall Vulnerabilities with Two CVSS 10 Flaws Follow us on all social media platforms @Hackread

📢⚠️🩹 #Cisco has patched 48 vulnerabilities in its Secure Firewall products, including 2 critical CVSS 10 flaws that could allow authentication bypass and remote code execution with root access - Patch NOW!

Read: hackread.com/cisco-patche...

#CyberSecurity #Vulnerability #PatchNow

2 1 0 0

Offensive Sequence

@offseq.bsky.social

1 week ago

CVE-2026-29058: CWE-78: Improper Neutralization of Special Elements used in an O AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full s

WWBN AVideo-Encoder < 7.0 has a CRITICAL OS command injection bug (CVE-2026-29058). Unauthenticated attackers can fully compromise servers. Upgrade to v7.0 immediately! radar.offseq.com/threat/cve-2026-29058-cw... #OffSeq #Vulnerability #PatchNow

0 0 0 0

Jim Guckin

@jimguckin.bsky.social

1 week ago

Android Security Update - Patch for 129 Vulnerabilities and Actively Exploited Zero-Day Google released its March 2026 Android Security Bulletin, patching 129 vulnerabilities in one of the biggest monthly updates in recent years.

Google patched 129 Android flaws, including an actively exploited zero-day in Qualcomm components. Mobile isn’t “secondary IT.” It’s email, MFA, and cloud access in your pocket.

cybersecuritynews.com/android-secu...

#CyberSecurity #Android #ZeroDay #PatchNow

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

1 week ago

ClawJacked Flaw Exposes OpenClaw Users
Read More: buff.ly/bTWMCMG

#ClawJacked #OpenClaw #AIAgentSecurity #LocalAgentRisk #DataExfiltration #VulnerabilityAlert #PatchNow #DevSecurity

0 0 0 0

PwrdByROG

@pwrdbyrog.bsky.social

1 week ago

Vulnerability: CISA issued an emergency directive regarding a critical flaw in Cisco SD-WAN systems (CVE-2026-20127). Attackers can bypass authentication to gain full admin privileges. Patch your network infrastructure immediately. #Cisco #CISA #Networking #CyberSecurity #PatchNow

2 0 0 0

TechNadu

@technadu.com

2 weeks ago

Juniper PTX routers affected by critical RCE (CVE-2026-21902).
Unauthenticated attacker.
Root-level execution.
Service enabled by default.
Patched in latest Junos OS Evolved releases.
Router compromise = traffic vantage point + pivot risk...

#Infosec #RouterSecurity #CyberThreats #PatchNow

0 0 0 0

Offensive Sequence

@offseq.bsky.social

2 weeks ago

CVE-2026-27947: CWE-88: Improper Neutralization of Argument Delimiters in a Comm CVE-2026-27947 is a critical vulnerability affecting Intermesh Group-Office, an enterprise CRM and groupware solution. The issue arises in the handling of TNEF (Transport Neutral Encapsulation Format) attachments, specifically winmail.dat f

🚨 CRITICAL RCE in Intermesh Group-Office! CVE-2026-27947 lets authenticated users run arbitrary commands via TNEF attachments. Patch to v26.0.9, v25.0.87, or v6.8.154 now. radar.offseq.com/threat/cve-2026-27947-cw... #OffSeq #RCE #PatchNow

0 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

2 weeks ago

SolarWinds releases critical patches for Serv-U vulnerabilities allowing root-level code execution. Users urged to update to version 15.5.4 immediately. #CyberSecurity #SolarWinds #ServU #PatchNow Link: thedailytechfeed.com/solarwinds-u...

0 0 0 0

Offensive Sequence

@offseq.bsky.social

2 weeks ago

Trend Micro Patches Critical Apex One Vulnerabilities Trend Micro has addressed eight vulnerabilities classified as critical and high severity within its Apex One endpoint security solutions for Windows and macOS platforms. Apex One is widely used in enterprise environments to provide endpoint

Trend Micro Apex One (Windows/macOS) patched for 8 CRITICAL & high-severity flaws. No known exploits, but immediate patching is essential to protect endpoints! 🔒 radar.offseq.com/threat/trend-micro-patch... #OffSeq #PatchNow

0 0 0 0

SCtoCS

@sctocs.bsky.social

2 weeks ago

CISA Warns Recently Patched RoundCube Vulnerabilities Are Now Being Exploited - SCtoCS CISA warns that recently patched RoundCube vulnerabilities are now being actively exploited, urging organizations to update and secure their systems immediately.

CISA warns that recently patched Roundcube Webmail vulnerabilities (including a critical RCE & XSS) are being actively exploited in the wild! Update your systems ASAP and apply fixes.
👉 sctocs.com/cisa-recentl...

#cybersecurity
#CISA
#Roundcube
#PatchNow
#sctocs

0 0 0 0

Jim Guckin

@jimguckin.bsky.social

2 weeks ago

Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware Outlook add-in phishing, Chrome and Apple zero-days, BeyondTrust RCE, cloud botnets, AI-driven threats, ransomware activity, and critical CVEs.

Critical BeyondTrust RCE (CVE-2026-1731) was exploited within 24 hours of PoC release.

The gap between disclosure and exploitation is basically gone.
If you’re waiting days to patch, attackers aren’t.

thehackernews.com/2026/02/week...

#CyberSecurity #ZeroDay #PatchNow

0 0 1 0

The Daily Tech Feed

@thedailytechfeed.com

3 weeks ago

Critical #Windows #Notepad vulnerability (CVE-2026-20841) allows remote code execution via malicious Markdown files. Update to version 11.2510+ immediately! #CyberSecurity #PatchNow Link: thedailytechfeed.com/critical-not...

0 0 0 0

Jim Guckin

@jimguckin.bsky.social

3 weeks ago

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update CISA adds four actively exploited vulnerabilities to its KEV catalog, including Chrome RCE, Zimbra SSRF, Windows ActiveX, and ThreatSonar flaws.

CISA added new flaws to the KEV catalog including Chrome, Windows ActiveX, and Zimbra.
Translation: attackers are already exploiting them.

If it’s in KEV and in your environment, it’s top priority.

thehackernews.com/2026/02/cisa...

#CyberSecurity #ThreatIntel #PatchNow

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

3 weeks ago

Grandstream VoIP Flaw Enables Eavesdropping
Read More: buff.ly/TSDAjK1

#Grandstream #VoIPSecurity #CVE20262329 #RootAccess #TelecomSecurity #CriticalVulnerability #PatchNow #CyberAlert

0 0 0 0

Posts tagged #patchnow