Microsoft Security

Read more about the article May 2026 Cybersecurity Roundup: NGINX RCE, Microsoft’s AI Bug Hunter, and Critical New Threats

May 2026 Cybersecurity Roundup: NGINX RCE, Microsoft’s AI Bug Hunter, and Critical New Threats

May 2026's critical rundown: an 18-year-old NGINX rewrite RCE (CVE-2026-42945) enabling unauthenticated code execution, Microsoft's 138-flaw Patch Tuesday with 16 bugs found by its own MDASH AI, an Exim BDAT flaw, a BitLocker zero-day PoC fixed only on Windows 11, and the 150-package GemStuffer RubyGems campaign.

Continue ReadingMay 2026 Cybersecurity Roundup: NGINX RCE, Microsoft’s AI Bug Hunter, and Critical New Threats
Read more about the article Microsoft April 2026 Patch Tuesday: 168 Vulnerabilities, Active Zero-Days, and What You Need to Know

Microsoft April 2026 Patch Tuesday: 168 Vulnerabilities, Active Zero-Days, and What You Need to Know

Microsoft's April 2026 Patch Tuesday fixed 168 vulnerabilities — an exploited SharePoint zero-day (CVE-2026-32201), the BlueHammer Defender EoP, and a CVSS 9.8 IKE RCE. Complete breakdown and patching order inside.

Continue ReadingMicrosoft April 2026 Patch Tuesday: 168 Vulnerabilities, Active Zero-Days, and What You Need to Know