vulnerability management

Almost nine in ten large organisations that are exposed to actively exploited vulnerabilities leave those weaknesses unpatched for six months or longer, according to fresh industry analysis that should alarm CISOs, boards, and cyber insurers alike. Background The headline figure—almost 9 in 10...

January’s CERT‑In advisories were a brutal reminder that the software stacks running our finance systems, identity fabrics, developer pipelines and collaboration platforms are prime targets — and that speed, not complacency, now separates a bulletin from a breach. In mid‑January 2026 India’s...

CISA’s decision to add five distinct vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on January 26, 2026, is a clear operational red flag: the agency has determined there is evidence of active or credible exploitation, and those entries now carry mandatory remediation weight...

Nearly nine out of ten large organisations exposed to vulnerabilities that are already being exploited in the wild leave those critical weaknesses unpatched for six months or longer, a new analysis of more than 2,000 firms indicates — a finding that sharpens focus on a long‑running problem in...

If you use Windows, Microsoft Office, Azure services, SQL Server, or Microsoft developer tools, treat the latest advisories as urgent: India’s national cyber‑security agency CERT‑In has flagged multiple high‑severity Microsoft vulnerabilities and Microsoft has issued January 2026 security...

Microsoft has recorded CVE-2026-20870 as an elevation-of-privilege flaw in the Windows Win32 kernel subsystem; the vendor’s public entry confirms the existence of a kernel-level local EoP and attaches Microsoft’s “confidence” metric to the record — a signal administrators should treat as an...

Microsoft’s Security Update Guide lists CVE-2026-20951 as a remote code execution (RCE) vulnerability affecting Microsoft SharePoint Server, but public technical details are sparse; defenders should treat the identifier as an urgent patch-and-hunt signal, cross-check vendor KB mappings, and...

Microsoft has recorded CVE‑2026‑20869 as an elevation‑of‑privilege vulnerability in the Windows Local Session Manager (LSM) component; the advisory is published in Microsoft’s Security Update Guide but key technical details and per‑SKU KB mappings are rendered through an interactive MSRC page...

Microsoft’s terse advisory for CVE-2026-20852 — described as a Windows Hello tampering vulnerability that “allows an unauthorized attacker to perform tampering locally” — should push security teams to treat biometric-signin integrity as a high-priority operational risk, even while authoritative...

The week’s vulnerability roundup from Cyble landed as a blunt reminder that 2026 opened with a sustained, high-pressure tempo for defenders: 678 newly tracked CVEs, nearly 100 with public Proof‑of‑Concept (PoC) code, and multiple high‑impact items already flagged by national authorities — a...

Microsoft’s short public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑scoped inventory statement, not proof that no other Microsoft product can include the same vulnerable kernel code. Background /...

Microsoft’s brief advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑scoped attestation, not a categorical statement that no other Microsoft product could contain the same vulnerable code. Background / Overview...

Microsoft’s MSRC advisory for CVE-2025-38491 explicitly states that Azure Linux “includes this open‑source library and is therefore potentially affected,” but that short phrase is a product‑scoped inventory attestation — not a categorical guarantee that Azure Linux is the only Microsoft product...

The Linux kernel vulnerability tracked as CVE-2025-38481 — a bug in the comedi subsystem that causes the COMEDI_INSNLIST ioctl to allocate an unreasonably large kernel buffer when given a maliciously large n_insns value — has been fixed upstream by adding a limit (MAX_INSNS) and by refusing...

FRRouting has been disclosed with a cluster of NULL-pointer dereference flaws that allow a remote attacker to crash the OSPF daemon (ospfd) by sending crafted OSPF packets; the most prominent of these is tracked as CVE-2025-61102 and affects FRRouting (frr) releases from v4.0 through v10.4.1...

Microsoft’s short answer — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the specific product Microsoft has inventory‑checked, but it is not a blanket guarantee that no other Microsoft product can or does include the same upstream...

Microsoft’s MSRC entry that “Azure Linux includes this open‑source library and is therefore potentially affected” is an authoritative product attestation for Azure Linux — but it is not a technical proof that no other Microsoft product includes the same library or could be affected by...

The Linux kernel vulnerability tracked as CVE‑2025‑38445 — “md/raid1: Fix stack memory use after return in raid1_reshape” is real, narrowly scoped, and — crucially for Microsoft customers — Microsoft has publicly attested only one of its product families as a confirmed carrier of the vulnerable...

Microsoft’s brief, machine‑readable advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a product‑scoped attestation, not a blanket guarantee that no other Microsoft product could carry the same vulnerable ksmbd code...

The most consequential security decision a CIO will make in 2025 is not buying the flashiest AI detection tool — it's choosing and operating a patch management platform that actually closes the patching gap across Windows, macOS, Linux and third‑party apps in hybrid, cloud and edge estates. The...