The company warned about zero-day attacks exploiting the Exchange Server vulnerability CVE-2026-42897 on May 14. 

The post Microsoft Patches Exploited Exchange Server Vulnerability appeared first on SecurityWeek.

Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them.

The post Microsoft Patches 200 Vulnerabilities appeared first on SecurityWeek.

Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges.

The post Cisco Patches Critical Vulnerability in Secure Workload appeared first on SecurityWeek.

Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues faster.

The post Oracle Debuts Monthly Critical Security Patch Updates appeared first on SecurityWeek.

CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. 

The post Critical Remote Code Execution Vulnerability Patched in Android appeared first on SecurityWeek.

The most severe of these security defects could allow remote attackers to execute arbitrary code.

The post Critical, High-Severity Vulnerabilities Patched in Apache MINA, HTTP Server appeared first on SecurityWeek.

The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.

The post WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities appeared first on SecurityWeek.

Apple rolled out the security patches for dozens of iPhone and iPad models and generations.

The post Apple Patches iOS Flaw Allowing Recovery of Deleted Chats appeared first on SecurityWeek.