Security & tech update — October 21, 2026
Microsoft's October release, a CISA KEV batch led by a Plex chain, a fresh PAN-OS GlobalProtect warning, and new Tomcat CVEs.
// TAG
#Security
6 postsSecurity & tech update — October 20, 2026
October Patch Tuesday ships (incl. a Shell zero-day), Linux pushes seven stable kernels with a critical network fix, CISA adds an Atlassian flaw to KEV, and mobile apps become a new endpoint-security frontier.
Security & tech update — October 19, 2026
This week's security and tech round-up: Plex2Shell RCE under active exploitation, a record Microsoft Patch Tuesday, curl 8.23.0, a 16-year-old Broadcom Wi-Fi flaw, and a CISA OT advisory.
Security & tech update — October 18, 2026
CISA adds Fortinet and BeyondTrust flaws to KEV, a critical Linux kernel VM escape (PwnEscape) is disclosed, and a China-linked group is behind the BeyondTrust zero-day.
Security & tech update — 17 October 2026
Actively exploited Windows vulnerability in the October update, critical RCE in VMware vCenter, an unauthenticated RCE in Xoscar, new Fortinet/BeyondTrust entries in the CISA KEV catalog and updated App Review Guidelines from Apple.
Security & tech update — 16 October 2026
Heavy patch week: record Patch Tuesday with a zero-day, active exploitation at Ivanti, Cisco and Palo Alto, and a file leak in self-hosted Atlassian products.