July 14, 2026—KB5099445 (Monthly Rollup)

July 14, 2026—KB5099445 Monthly Rollup Applies To Windows Server 2012 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure all...

October 13, 2026-KB5127689 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 21H2 and Windows 10 Version 22H2

October 13, 2026-KB5127689 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 21H2 and Windows 10 Version 22H2 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5 and 4.8.1 The October 13, 2026 update for Windows 10 Version 21H2 and Windows 10...

October 13, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 R2 (KB5127688)

October 13, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 R2 KB5127688 Applies To .NET Note Applies to: Microsoft .NET Framework 4.8 Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled devi...

October 13, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB5127686)

October 13, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 KB5127686 Applies To .NET Note Applies to: Microsoft .NET Framework 4.8 Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device...

October 13, 2026-KB5127685 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1809 and Windows Server 2019

October 13, 2026-KB5127685 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1809 and Windows Server 2019 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5 and 4.8 The October 13, 2026 update for Windows 10, version 1809 and Windows Server 2019...

October 13, 2026-KB5127684 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

October 13, 2026-KB5127684 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 4.8 The October 13, 2026 update for Windows 10, version 1607 and Windows Server 2016 includes securi...

October 13, 2026-KB5127683 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 and Windows 10 Version 22H2

October 13, 2026-KB5127683 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 and Windows 10 Version 22H2 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5 and 4.8 The October 13, 2026 update for Windows 10 Version 21H2 and Windows 10 Versio...

October 13, 2026-KB5127687 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022

October 13, 2026-KB5127687 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5 and 4.8 The October 13, 2026 update for Windows Server 2022 includes security and cumulative reliability improvements...

K000163690: Apache Tomcat vulnerabilities CVE-2026-78437, CVE-2026-86248, and CVE-2026-87022

Security Advisory Description CVE-2026-78437 Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, fro...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an improper restriction of XML external entity vulnerability due to RESTEasy (CVE-2026-17615)

Summary There is a vulnerability in the RestEasy library that affects IBM WebSphere Application Server Liberty with restfulWS-3.0, restfulWS-3.1, or restfulWS-4.0 enabled. Vulnerability Details CVEID:CVE-2026-17615 DESCRIPTION: A flaw was found in RESTEasy's SourceProvider. This vulnerability...

Security Bulletin: IBM WebSphere Application Server is affected by a bypass authentication vulnerability (CVE-2026-93907)

Summary IBM WebSphere Application Server is affected by a bypass authentication vulnerability. Vulnerability Details CVEID:CVE-2026-93907 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation...

Security Bulletin: Spring Expression Language (SpEL) in IBM Sterling Control Center makes it vulnerable to Improper Control of Dynamically-Managed Code Resources (CVE-2026-59283)

Summary A Critical vulnerability in Spring Framework that allows a safety guard bypass when evaluating Spring Expression Language SpEL expressions using SimpleEvaluationContext with the expression compiler enabled, potentially leading to unauthorized actions or remote code execution; affected...

openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options

A flaw was found in OpenSSH. When certain configuration options are set to "none" within a conditional block to disable a feature, the OpenSSH server daemon sshd incorrectly interprets the value as a literal file path rather than disabling the setting. A local attacker could exploit this issue by...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-103499)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service vulnerability. Vulnerability Details CVEID:CVE-2026-103499 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote unauthenticated attacker to cause a denial of...

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

The Norwegian Data Protection Authority DPA has fined Xandr, an advertising unit owned by Microsoft, €8.6 million $9.62 million for illegally relaying ​Grindr users' sensitive data to advertisers. The administrative penalty is the largest issued by the data protection watchdog, arguing the case...

Security Bulletin:A vulnerability in libssh affects IBM SAN Volume Controller, IBM Storage Virtualize and IBM FlashSystem products

Summary A vulnerability in libssh affects IBM Storage Virtualize products and could result in a confidentiality impact. CVE-2025-5318. Vulnerability Details CVEID:CVE-2025-5318 DESCRIPTION: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered...

Security Bulletin: Vulnerabilities in the kernel and libssh affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in libssh and the kernel affect IBM Storage Virtualize products and could cause denial of service and privilege escalation impacts. CVE-2025-5987 CVE-2025-39966 CVE-2025-40176 Vulnerability Details CVEID:CVE-2025-5987 DESCRIPTION: A flaw was found in libssh when using the...

Security Bulletin: Multiple vulnerabilities in the Linux kernel and expat affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in the kernel and expat components affect IBM Storage Virtualize products and could cause denial of service and privilege escalation impacts. CVE-2026-43284 CVE-2023-53373 CVE-2025-59375 Vulnerability Details CVEID:CVE-2026-43284 DESCRIPTION: In the Linux kernel, the...

CLSA-2026-1791889844 httpd: Fix of 11 CVEs

CVE-2026-63718: modproxyuwsgi: drop hop-by-hop headers from the backend response - CVE-2026-73636: modauthdigest: accept a one-time nonce only once, also when the client entry was garbage collected - CVE-2026-73637: modauthdigest: don't use a client entry outside the client lock - CVE-2026-48005:...

Product Walkthrough: Bitdefender AI Visibility and Control

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine...