ChannelLife US - Industry insider news for technology resellers
United States

Patching Stories

American Stories

Patching stories

Global Stories

Patching stories

Qualys warns patching surge is missing active exploits
Ransomware

Qualys warns patching surge is missing active exploits

Despite more patching, organisations are leaving the most dangerous flaws open longer, as attackers exploit vulnerabilities before defenders can act.

By Mara Sugue • 4 min read • Yesterday
Palo Alto warns on 22 million exposed PHP instances
Security Operations Centres

Palo Alto warns on 22 million exposed PHP instances

Security teams face a wider attack surface, as Palo Alto Networks says the PHP flaws could leave 22 million internet-facing instances exposed worldwide.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday
Human hackers drive attacks as AI use stays limited
Ransomware

Human hackers drive attacks as AI use stays limited

Most tracked cyberattacks are still run by people, even as attackers exploit high-severity flaws in an average of three days.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday
Supply chain attacks rise as 215 flaws are exploited
Malware

Supply chain attacks rise as 215 flaws are exploited

Supply chain compromises helped actively exploited flaws to 215 in the first half of 2026, as attackers used trusted tools and platforms to steal credentials.

By Sofiah Nichole Salivio • 5 min read • Yesterday
Azul issues security fixes for record OpenJDK flaws
Open source

Azul issues security fixes for record OpenJDK flaws

Enterprises running Java face a heavier patching burden, as 53 flaws in the latest OpenJDK update must be fixed far faster than usual.

By Mara Sugue • 4 min read • 2 days ago
SOCtoberfest: The four habits that stop most attacks - passwords, MFA, phishing and patching
Virtual Private Networks

SOCtoberfest: The four habits that stop most attacks - passwords, MFA, phishing and patching

Even small firms can cut breach risk sharply by enforcing passwords, MFA, phishing checks and patching, CISA says.

By Justin Carter • 7 min read • 3 days ago
98 zero-day flaws found at TrendAI hacking contest
Smart Home

98 zero-day flaws found at TrendAI hacking contest

Researchers disclosed 98 flaws across phones, printers and AI tools, underscoring how quickly the attack surface is widening for businesses.

By Mara Sugue • 5 min read • 4 days ago
Secure.com says ransomware budgets should fix basics first
Firewalls

Secure.com says ransomware budgets should fix basics first

Most attacks still start with weak credentials, unpatched systems or phishing, so the firm says budgets should shore up basics before AI fears.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Omnissa launches AI tools as endpoint use surges 1,000%
IT Automation

Omnissa launches AI tools as endpoint use surges 1,000%

Three-quarters of AI assistant use was unsanctioned, underscoring why enterprises are turning to tighter controls as adoption jumps nearly 1,000% year on year.

By Joseph Gabriel Lagonsin • 4 min read • Last week
PCA Cyber Security launches CERVUS for device risk
Manufacturing

PCA Cyber Security launches CERVUS for device risk

Manufacturers face tighter compliance pressure as the new platform maps vulnerabilities to specific devices, components and SBOMs for quicker remediation.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Microsoft patches 1,413 flaws, including exploited zero-day
Cybersecurity

Microsoft patches 1,413 flaws, including exploited zero-day

The latest update forces defenders to chase a second exploited Windows Shell zero-day as Outlook reading-pane bugs also widen the attack surface.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Anthropic MCP SDK flaw lets attackers hijack logins
Application Programming Interface

Anthropic MCP SDK flaw lets attackers hijack logins

A flaw in Anthropic's MCP Python SDK could let malicious servers steal credentials and take over accounts through apparently legitimate logins.

By Joseph Gabriel Lagonsin • 4 min read • Last week
AI attacks demand operational change in the post Mythos era
Multi-factor authentication

AI attacks demand operational change in the post Mythos era

Only 5% of Australian companies are ready for AI-driven attacks, leaving most exposed as threat actors move at machine speed.

By Anthony Caruana • 4 min read • Last week
Cork Cyber adds automated patching & AI risk tools
Artificial Intelligence

Cork Cyber adds automated patching & AI risk tools

The update could cut MSPs' manual remediation burden, with Cork saying 77% of eligible security tickets now close without human intervention.

By Joseph Gabriel Lagonsin • 5 min read • Last week
Seven Cyber Controls Businesses Can No Longer Afford to Overlook
Disaster Recovery

Seven Cyber Controls Businesses Can No Longer Afford to Overlook

Businesses face rising disruption unless seven basic cyber controls are properly integrated, tested and owned across identity, recovery and supplier access.

By Matthew Lowe • 4 min read • This month

Stories from Other Regions

Patching stories

Hexnode expands Linux patching & login tools in UK
Identity and Access Management

Hexnode expands Linux patching & login tools in UK

British IT teams get tighter control over Linux updates and logins as Hexnode brings Ubuntu, Debian and Fedora into its management suite.

By Sofiah Nichole Salivio • 3 min read • 3 days ago
Qualys launches TruRisk Eliminate 2.0 with TruConfidence
Security Operations Centres

Qualys launches TruRisk Eliminate 2.0 with TruConfidence

Existing customers will get the upgrade free as Qualys extends remediation beyond endpoints, aiming to cut outage risk while speeding fixes across hybrid estates.

By Joseph Gabriel Lagonsin • 4 min read • Last week