patch

Ivanti Just Got Its 33rd CISA Exploited Vulnerability Entry

John Z Black Apr 11, 2026

Vulnerabilities & Patching #ivanti #epmm #cisa-kev #cve-2026-1340 #patch #enterprise-security

CVE-2026-1340 is a pre-auth RCE in Ivanti EPMM, CVSS 9.8, exploited since January. It's the 33rd Ivanti entry on the CISA KEV catalog. At some point that number has to become a procurement conversation.

Android's April Patch Targets a Security Layer Most Users Have Never Heard Of

John Z Black Apr 10, 2026

Vulnerabilities & Patching #android #strongbox #cve-2026-0049 #cve-2025-48651 #patch #hardware-security #mobile-security

April's Android security update fixes a critical zero-interaction DoS and a High-severity flaw in StrongBox, the hardware layer protecting your payment credentials, biometrics, and encrypted storage.

Three Vendors, Three Critical Bugs, All Exploited This Week: The Edge Device Emergency

John Z Black Mar 31, 2026

Vulnerabilities & Patching #f5 #big-ip #citrix #netscaler #fortinet #forticlient-ems #cisa-kev #rce #cve #patch #perimeter-security

F5 BIG-IP, Citrix NetScaler, and Fortinet FortiClient EMS all have critical vulnerabilities under active exploitation this week. Here's what happened and what you need to do right now.

CISA Added Five Actively Exploited Flaws to Its List. You Have Until April 3.

John Z Black Mar 25, 2026

Vulnerabilities & Patching #cisa #kev #apple #laravel #craft-cms #patch #vulnerability #darksword

CISA added five actively exploited vulnerabilities to its KEV catalog, including three Apple flaws tied to the DarkSword iOS exploit kit and a CVSS 10.0 RCE in Craft CMS. The April 3 deadline is for federal agencies. The exploitation isn't.

Patch Chrome Now: Two Zero-Days Being Actively Exploited in the Wild

John Z Black Mar 14, 2026

Vulnerability #chrome #zero-day #cve-2026-3909 #google #patch #browser-security #v8 #skia

Google just patched two zero-days in Chrome 146 that were already being used in real attacks. Update now or stay exposed.

Your Old iPhone Is Under Active Attack. Update It Today.

John Z Black Mar 13, 2026

Consumer Security #apple #ios #webkit #coruna #patch #mobile-security #active-exploitation

Apple issued an emergency patch for older iPhones and iPads to fix actively exploited Coruna WebKit vulnerabilities. If you have an old device you haven't updated, this is when that delay becomes a real problem.

Veeam Has Seven Critical RCE Flaws and Ransomware Operators Are Paying Attention

John Z Black Mar 13, 2026

Vulnerability Intelligence #veeam #ransomware #rce #backup #patch #enterprise

Seven simultaneous unauthenticated RCE vulnerabilities in Veeam Backup & Replication. This is a ransomware operator's wishlist, and it all dropped at once. Patch now.