Mastodawn

🔴 Nginx UI CVE-2026-3841 auth bypass is under active exploitation. 🟡 Microsoft April Patch Tuesday fixes an exploited SharePoint flaw. 🟡 Attackers are abusing trusted n8n cloud webhooks for phishing and malware delivery. solomonneas.dev/intel #cybersecurity #threatintel #infosec #patching

Ryan Wild 4d ago

Has anyone got any recommendations for not super difficult to use / setup / manage linux patching solutions? I was looking at Landscape as most of the servers are Ubuntu but it turns out you need "Call us" pricing with Ubuntu Pro to get more than 10 servers installed (And spoiler, I have more than 10 servers just to run Mastodon stuff!).

#Linux #Patching #Security #DevOPS

sayzard Apr 8

TechRadar (@techradar)

마이크로소프트가 알려진 취약점에 대한 패치 가능 시간은 점점 줄어드는 반면, 제로데이를 악용할 수 있는 시간은 늘어나고 있다고 경고했다. 보안 대응 지연이 공격자에게 유리해지는 상황을 강조한 내용이다.

https://x.com/techradar/status/2041669372637528287

#microsoft #cybersecurity #zeroday #patching #vulnerability

TechRadar (@techradar) on X

Microsoft warns the window to patch known flaws is shrinking, while the window to abuse zero-days grows. https://t.co/BHDsOvLJCJ

X (formerly Twitter)

Schneier on Security RSS Apr 7

Cybersecurity in the Age of Instant Software

AI is rapidly changing how software is written, deployed, and used. Trends point to a future where AIs can write custom software quickly and easily: “instant software.” Taken to an extreme, it might become easier for a user to have an AI write an ... https://www.schneier.com/blog/archives/2026/04/cybersecurity-in-the-age-of-instant-software.html

#computersecurity #vulnerabilities #Uncategorized #cybersecurity #patching #LLM #AI

Cybersecurity in the Age of Instant Software - Schneier on Security

AI is rapidly changing how software is written, deployed, and used. Trends point to a future where AIs can write custom software quickly and easily: "instant software." Taken to an extreme, it might become easier for a user to have an AI write an application on demand—a spreadsheet, for example—and delete it when you’re done using it than to buy one commercially. Future systems could include a mix: both traditional long-term software and ephemeral instant software that is constantly being written, deployed, modified, and deleted. AI is changing cybersecurity as well. In particular, AI systems are getting better at finding and patching vulnerabilities in code. This has implications for both attackers and defenders, depending on the ways this and related technologies improve...

Schneier on Security

DoomsdaysCW Apr 5

#MilpitasCA - #MendWithFriends

Saturday, April 11, 2026
11:00AM – 12:30PM

#MilpitasLibrary
160 North Main Street
Milpitas CA 95035

"Do you have...

...a stuffed animal with the stuffing leaking out?

...a shirt with a missing button?

...a hole you want to patch?

...a stain you want to cover up?

Bring it to the Mend with Friends mending club and let’s fix it together! If you are curious about sewing, we can also introduce beginners to some basic hand-sewing stitches.

No registration is required; bring your own items to mend, project to work on, or practice basic stitches with our fabric scraps! Limited mending supplies for hand sewing and casual instruction are available, but bringing your own favorite tools, extra buttons, fabric scraps, or experience to share is always appreciated.

Children are welcome to accompany their caregiver and learn alongside them.

We meet every month on the second Saturday!"

FMI:
https://sccl.bibliocommons.com/events/6934d94204caba2f00d3a3d5

#SolarPunkSunday #Mending #StuffieRepair #Patching #Stitching #LearningSewing #BuildingCommunity
#LibrariesRule!

clankussy Apr 3

Cisco patched two critical flaws: CVE-2026-20093 (CVSS 9.8) in Integrated Management Controller allows unauthenticated attackers to bypass auth and take over systems including UCS servers. CVE-2026-20160 (CVSS 9.8) in Smart Software Manager On-Prem enables unauthenticated RCE via exposed internal API. IMC is the lights-out management interface—compromising it means full control below the OS. SSM On-Prem manages your licensing. Enterprise patching never stops.

#Cisco #Vulnerability #Patching #EnterpriseSecurity

Source: https://thehackernews.com/2026/04/cisco-patches-98-cvss-imc-and-ssm-flaws.html

Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise

Cisco patches two 9.8 CVSS flaws (CVE-2026-20093, CVE-2026-20160), preventing authentication bypass and root access.

The Hacker News

OffSequence Mar 31

🚨 CVE-2026-21861: CRITICAL OS command injection in baserCMS < 5.2.3. Admins can execute arbitrary system commands via core update. Patch to 5.2.3+ ASAP to prevent full compromise. https://radar.offseq.com/threat/cve-2026-21861-cwe-78-improper-neutralization-of-s-7b86deef #OffSeq #baserCMS #CVE2026_21861 #infosec #patching

Negative PID SL Mar 19

The Solar Wind Supply Chain attack

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#SolarWinds #hackers #patching #supplyChain #Cybersecurity #cyberattacks #cyberThreats #onlineSecurity #negativepid

The SolarWinds Supply Chain Attack - Negative PID

Imagine downloading a patch to update a critical system, and that patch contained the malware to hack you. That really happened.

Negative PID

ml4den Mar 13

Nation-state actors and ransomware groups dominated the headlines this week, with some critical vulnerabilities in widely-used software are also demanding attention from security teams.

#cybersecurity #vulnerabilities #ransomware #patching #cyberthreat

https://cybernewsweekly.substack.com/p/cybersecurity-news-review-week-11-066

Cybersecurity News Review - Week 11 (2026)

Nation-state actors and ransomware groups dominated the headlines this week, with some high-profile victims caught in the crossfire.

Cybersecurity News Weekly

Naglafarn Mar 9

☢️ Welcome my newest dragon to my blog. Monday morning our CISO dragon will help me to look into why and how IT Operations, CISO and Application owners should team up for Windows patching.

https://hartiga.de/it-architecture/windows-patching-responsibilities/

#WindowsServer #Automation #Patching #RiskManagement #CISO