Security & tech update — October 21, 2026
Microsoft's October release, a CISA KEV batch led by a Plex chain, a fresh PAN-OS GlobalProtect warning, and new Tomcat CVEs.
// SECURITY BY CURIOSITY
PhaseQ
Security by curiosity. Every phase starts with a question.
Q
Question First
Daily
Security Updates
∞
Curiosity
phaseq@lab:~$
$ whoami
PhaseQ — security by curiosity
$ cat /etc/mission
Ask why. Find out how. Share what we learn.
$ ls ./phases/
question/ investigate/ understand/ defend/ share/
$ _
// Latest Insights & Updates
Security & tech update — October 20, 2026
October Patch Tuesday ships (incl. a Shell zero-day), Linux pushes seven stable kernels with a critical network fix, CISA adds an Atlassian flaw to KEV, and mobile apps become a new endpoint-security frontier.
Security & tech update — October 19, 2026
This week's security and tech round-up: Plex2Shell RCE under active exploitation, a record Microsoft Patch Tuesday, curl 8.23.0, a 16-year-old Broadcom Wi-Fi flaw, and a CISA OT advisory.
Security & tech update — October 18, 2026
CISA adds Fortinet and BeyondTrust flaws to KEV, a critical Linux kernel VM escape (PwnEscape) is disclosed, and a China-linked group is behind the BeyondTrust zero-day.
Security & tech update — 17 October 2026
Actively exploited Windows vulnerability in the October update, critical RCE in VMware vCenter, an unauthenticated RCE in Xoscar, new Fortinet/BeyondTrust entries in the CISA KEV catalog and updated App Review Guidelines from Apple.
Security & tech update — 16 October 2026
Heavy patch week: record Patch Tuesday with a zero-day, active exploitation at Ivanti, Cisco and Palo Alto, and a file leak in self-hosted Atlassian products.
Coming soon
This is PhaseQ, a brand new site by Uiltje that's just getting started. Things will be up and