TAG
#patching
Stories connected through a shared idea, actor, technology or theme.
PaperCut releases an emergency patch after confirmed exploitationPaperCut's security bulletin recorded confirmed exploitation and customer incidents affecting all NG and MF versions, then announced an emergency patch for versions 25 and 26 at 02:10 AEST. The company advised restricting public access to affected servers while work continued on the version 24 patch.→CISA orders urgent remediation for actively exploited Ray RCE flawCISA said attackers are exploiting CVE-2025-62593, a critical Ray vulnerability with a CVSS v4 score of 9.4. The browser-based attack can reach developer machines or private networks through DNS rebinding, and Ray 2.52.0 contains the fix.→Rapid7 says AI is compressing the vulnerability-to-exploitation cycleRapid7 reported that high- and critical-severity vulnerability disclosures doubled year on year to 8,539 in Q2 2026, while newly exploited vulnerabilities rose 8% to 40. The analysis links the pressure to AI-assisted discovery and exploitation, as well as insecure code produced through vibe coding, and recommends prioritising exposure over severity scores alone.→