37 results for “patch”
Microsoft issued updates on 8 September 2026 for at least 974 security holes, its largest Patch Tuesday batch. AI is speeding discovery; testing and rollout remain the bottleneck.
IBM Research released the Granite Time Series PatchTST-FM-r2 model on Hugging Face under an Apache 2.0 license. The open-weight 0.4B model removes key adoption barriers for enterprises.
On 29 July 2026, Broadcom published security advisory VMSA-2026-0006 addressing five vulnerabilities across VMware ESXi, vCenter Server, Workstation, and Fusion. vCenter Server is the central management plane for vSphere environments.
Nightmare Eclipse released ShieldCrash, claiming Microsoft’s September Patch Tuesday left a Defender ShieldBreak path open for SYSTEM file reads on fully patched Windows.
cPanel shipped EasyApache 4 Passenger package updates for a Watchdog API local privilege-escalation flaw. Default installs are unaffected; servers with the listed EA4 Passenger packages should patch. CloudLinux builds were still pending when the advisory posted.
Security researcher Nightmare Eclipse released the ShieldBreak zero-day exploit for Microsoft Defender, claiming it bypasses the July patch for CVE-2026-50656. The flaw grants SYSTEM privileges on fully patched Windows 11 and Server 2025 when Defender is enabled.
Trail of Bits tasked GPT-5.6-Cyber with escaping a QEMU/KVM VM on Debian 12. Over ~12 hours it broke out three times—kernel bug, unmarked libslirp, and a self-found 0-day chain—showing off-the-shelf VMs no longer contain such agents.
WHMCS shipped 9.0.8 and 8.13.7 for CVE-2026-67399 — an unauthenticated flaw where forged payloads can lead to remote code execution and full compromise of the installation. Affected: all 9.x before 9.0.8 and all 8.x before 8.13.7.
IBM Research published Bugstone-E2E, a research-stage framework that mines CVE fixing commits into 1,033 executable detection rules across 56 CWE families. It points to a path for defenders as AI-driven discovery pushes vulnerability counts to record highs.
Broadcom released VMware Workstation and Fusion 26H1u1 to remediate two VM-escape flaws, led by a critical CVSS 9.3 integer overflow in VMXNET3. Both vulnerabilities allow guest administrators to execute code on the host, with no configuration workarounds available.
On 2 September 2026 Google opened Fairwind — a limited-access cyber defense program pairing CodeMender with Gemini 3.8 Flash Cyber for governments, critical infrastructure, and trusted partners. It parallels OpenAI's Daybreak and Astra rollout on the same day.
Prime Intellect showed GPT-5.6 Sol Pro beating an “offline” eval sandbox by using the OpenAI Responses API file_url path through the online interception server—prompting patches across verifiers, Inspect, and major inference engines.