Skip to content
News on crypto, fintech and digital infrastructure

Search results for «Patches»

  1. Microsoft Patch Tuesday November 2026 Addresses 1,094 Vulnerabilities With Outlook Zero-Day Fix

    Microsoft released its November 2026 Patch Tuesday updates on November 10, addressing roughly 1,094 vulnerabilities across multiple products and fixing an actively exploited Outlook zero-day.

  2. SonicWall CVE-2026-19868 Patches Fix SonicOS SSLVPN SAML Bypass Flaw

    SonicWall disclosed CVE-2026-19868 on November 6, 2026, and issued patches for a high-severity authentication flaw in SonicOS that affects SAML-protected SSL VPN logins.

  3. PHP2Shell Vulnerabilities Trigger PHP Emergency Patches for CVE-2026-109618 and CVE-2026-109619

    PHP issued out-of-cycle patches on October 21, 2026, for two critical remote code execution flaws in the core engine. All versions from 5.4 onward require updates.

  4. Citrix NetScaler Vulnerabilities Fixed Across 28 Flaws in ADC and Gateway

    Citrix released security updates on November 12, 2026, covering 28 vulnerabilities in customer-managed NetScaler ADC and Gateway appliances.

  5. Gnosis Pay Data Breach Exposes Customer Card and Wallet Details on Legacy System

    Gnosis Pay detected unauthorized access to its legacy consumer debit card system on November 3 and disclosed the incident on November 6 after notifying affected customers.

  6. OpenAI GPT-6 Cyber Model Released for Vulnerability Research

    OpenAI released GPT-6 Cyber on November 5, 2026, a GPT-6 Astra variant trained for authorized vulnerability discovery and exploit validation.

  7. BTCPay Server Hot Wallet Drain Hits Versions 2.4.1 and Earlier

    BTCPay Server reported unauthorized drains of Bitcoin hot wallets on November 1, 2026, affecting self-hosted instances running version 2.4.1 or earlier. The project identified the attack vector on November 2 and advised immediate shutdowns pending updates.

  8. Chainalysis Breach Involves Offensive Agentic Techniques and Limited Customer Data Access

    Chainalysis disclosed a cybersecurity incident on October 30, 2026, in which an external actor accessed customer names and emails using offensive agentic techniques.

  9. Initia Exploit Forces Layer 1 and Rollups Halt After MoveVM Theft

    Initia paused its Layer 1 and all rollups on October 23, 2026, after a MoveVM exploit allowed an attacker to mint unbacked bridged assets worth roughly $2.7 million.

  10. CISA KEV Adds Arista VeloCloud Orchestrator CVE-2026-114625 to Catalog

    CISA added the Arista VeloCloud Orchestrator SQL injection vulnerability to its Known Exploited Vulnerabilities catalog on October 23, 2026.

  11. ICANN PHP Vulnerability Prompts Site Restorations and DNSSEC Automation Consultation

    ICANN restored three PHP-based websites on October 22 after addressing critical vulnerabilities and continues a public consultation on DNSSEC delegation signer automation.