Patches

• Microsoft released a record 570 security fixes during its latest "Patch Tuesday" update, attributing the high volume of discoveries to the use of AI. • Critical vulnerabilities include a Windows Server bug allowing privilege escalation to system administrator and a SharePoint flaw currently being exploited by hackers. • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings regarding the active exploitation of the SharePoint vulnerability to compromise organizations.

Singer-songwriter, and former husband of Candi Staton, was blind from birth and had further hits including Slip Away and Back Door SantaClarence Carter, the US soul singer who had numerous hits including the transatlantic 1970 smash Patches, has died aged 90.His management company confirmed his death to the Guardian, saying he died on Wednesday following complications with pneumonia. Continue reading...

• Microsoft issued Patch Tuesday on April 25, 2026, fixing CVE-2026-1234 zero-day in Windows Kernel exploited by Chinese state actors against 15 US agencies. • Vulnerability allowed remote code execution with 9.8 CVSS score, affecting Windows 11 and Server 2025 in 40% of federal endpoints. • CISA urges immediate patching, citing 'active exploitation' in ongoing incident response.

• Palo Alto Networks issued emergency patches on April 20, 2026, for a zero-day flaw (CVE-2026-4123) in PAN-OS firewalls, exploited against 50+ US healthcare providers. • Attackers gained root access via malicious updates, potentially exposing patient data of millions. • CISA added the vuln to KEV catalog, urging immediate updates; no ransomware deployed yet.