Tech News
Short notes on security advisories, network and virtualization releases that matter to IT teams, each linked to its original source.
Image: KasperskySecurity · Oct 21, 2026
Two critical flaws, both rated CVSS 9.2, let an unauthenticated attacker run code on servers running PHP. Fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP project published backports for 7.4, 8.0 and 8.1. Patch internet-facing servers first, restart PHP-FPM or the web server, check the version, and review logs for signs of compromise.
Image: Network-Switch.comAI & Networking · Jun 4, 2026
At its NAVIGATE 2026 summit, H3C described an agentic-driven network approach that builds AI into data center switches and enterprise routers, alongside a Wi-Fi 8 access point and cloud-edge AI firewalls.
Image: Help Net SecuritySecurity · Jan 30, 2026
Ivanti released temporary patches for two critical code injection flaws in Endpoint Manager Mobile, CVE-2026-1281 and CVE-2026-1340, which can let unauthenticated attackers run code on on-premises installations. CVE-2026-1281 was exploited as a zero-day. The temporary RPM patches must be reapplied after any upgrade, and a permanent fix is planned for version 12.8.0.0.
Image: Help Net SecuritySecurity · Jan 28, 2026
Fortinet began releasing FortiOS versions that fix a critical zero-day which let attackers log in to FortiGate firewalls and create new local admin accounts. A reminder to patch firewall firmware quickly and review admin accounts.
Image: Help Net SecuritySecurity · Jan 27, 2026
Microsoft released out-of-band Office security updates for CVE-2026-21509, a security feature bypass flaw that attackers were already exploiting in the wild.
Virtualization · Dec 5, 2025
Proxmox released Datacenter Manager 1.0, a single interface for managing multiple Proxmox clusters, aimed at replacing scattered dashboards and manual coordination.
