Software maintainers have released emergency security updates for a critical buffer overflow vulnerability in the open-source Brotli data compression library.
PHP has rebuilt its official Windows binary packages to patch CVE-2026-111497, a memory corruption vulnerability in the bundled Brotli compression library that could lead to code execution.
PHP maintainers have issued mitigation advice for a new remote code execution vulnerability, CVE-2026-115560, which requires a rare combination of configuration settings to exploit.
A recent report indicates that one in five UK cybersecurity leaders actively avoids Patch Tuesday, taking sick leave or holiday due to the intense stress and overwhelming workload associated with managing software updates and vulnerability
The Federal Bureau of Investigation has removed an Accenture contractor after a security patch failure on an Oracle PeopleSoft platform allowed the ShinyHunters cybercrime group to breach the bureau's job portal and steal employee personal