#SecurityUpdates
Updated your npm packages for Node2Shell? The fix is in Node.js itself (22.23.4, 24.22.1 or 26.12.1), and containers, CI images and DDEV each carry their own copy. Here's what to check, Drupal sites included.

#NodeJs #DrupalSecurity #SecurityUpdates #WebsiteMaintenance
Node2Shell: Check the Node.js Runtime, Not Just npm | Dynamosys
Node2Shell (CVE-2026-111497) is fixed in Node.js 22.23.4, 24.22.1 and 26.12.1. Find every runtime that needs it, from containers to DDEV and Drupal builds.
www.dynamosys.com
November 3, 2026 at 6:11 PM
A Drupal Commerce flaw is being exploited. Update to 3.3.13 or 8.x-2.41, then review your orders: the patch doesn't check past ones.
#DrupalCommerce #DrupalSecurity #ECommerce #SecurityUpdates #WebsiteMaintenance
Drupal Commerce Alert: Update and Audit Orders | Dynamosys
Drupal Commerce has an actively exploited security flaw. Check affected versions, install the fixes, and review orders and payments for inconsistencies.
www.dynamosys.com
October 29, 2026 at 6:19 PM
October 22, 2026 at 9:30 AM
Fortinet brengt donderdag 22 oktober een reeks securityupdates uit voor zijn producten. Het raadt gebruikers met klem aan die patches meteen na release te installeren. De updates zijn voor verantwoord gemelde kwetsbaarheden, die mede met hulp van geavanceerde AI-modellen zijn gevonden.
Fortinet brengt vandaag kritieke patches uit die klanten snel moeten installeren
ebx.sh
October 22, 2026 at 1:06 PM
PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution, demonstrated on the official Drupal container image. Updating Drupal won't fix them; your PHP runtime needs 8.2.35, 8.3.36, 8.4.27 or 8.5.12.
#PHP #DrupalSecurity #SecurityUpdates #WebsiteMaintenance
PHP2Shell: Why Updating Drupal Isn’t Enough | Dynamosys
PHP2Shell flaws put Drupal sites at risk. See the patched PHP versions, what to ask your host or cloud team, and why updating Drupal is not enough.
www.dynamosys.com
October 22, 2026 at 6:20 PM
On October 21, GitLab released emergency security updates for a maximum-severity flaw that could let attackers without accounts run code on self-managed servers.

#GitLab #CVE2026110264 #SoftwareVulnerability #CodeExecution #SelfManagedServers #SecurityUpdates
[AI]
GitLab Issues Emergency Updates for a Flaw That Could Allow Unauthenticated Code Execution
GitLab issued emergency updates for a maximum-severity flaw that could allow unauthenticated code execution on self-managed servers.
harava.news
October 22, 2026 at 3:54 AM
October 17, 2026 at 1:35 PM
[New Post] 📌 Microsoft Fixes 1411 Security Vulnerabilities and 3 Zero-Day Vulnerabilities in October 2026 Patch Tuesday - www.anoopcnair.com/microsoft-fi...
#PatchTuesday #MicrosoftSecurity #SecurityUpdates #ZeroDayVulnerability #CyberSecurity #CVE #Windows11 #WindowsUpdate #MicrosoftUpdates
October 14, 2026 at 1:05 PM
Drupal 11.4.10, 11.3.19 and 10.6.19 fix a critical remote code execution flaw. Update now, and check Gin and Entity List separately.
#Drupal #Drupal11 #DrupalSecurity #DrupalCore #SecurityUpdates #WebsiteMaintenance #Cybersecurity
Drupal 11.4.10: Critical Security Update | Dynamosys
Drupal 11.4.10 fixes a critical remote code execution flaw and two XSS vulnerabilities. Check affected versions, related updates, and next steps.
www.dynamosys.com
October 14, 2026 at 7:48 PM
[New Post] 📌Windows 11 23H2 Enterprise and Education | End of Security Updates and Upgrade Recommendations - www.anoopcnair.com/windows-11-2...
#Windows11 #Windows11_23H2 #Windows11Enterprise #Windows11Education #SecurityUpdates #HTMDCommunity
October 12, 2026 at 8:52 AM
October 10, 2026 at 1:35 PM
A phone still working normally doesn’t mean it’s still getting security updates.

On Android, check both the last update date and the manufacturer’s suppor…

https://en.hacks.gr/pos-tha-elegxeis-an-to-android-kinito-soy-lamvanei-akomi-enimeroseis-asfaleias/

#Android #AndroidUpdates #SecurityUpdates
October 6, 2026 at 9:01 PM
Rod’s Saturday Funnies: October 3, 2026 - Nine months in a Pentagon file cabinet, and the coffee maker is still the prime suspect.

#RodsSaturdayFunnies #CybersecurityHumor #TechNews #SaturdayCartoons #CyberSafety #TechLaughs #SecurityUpdates
https://go.rodtrent.com/go/25uyaz8
October 3, 2026 at 1:35 PM
Kiteworks patched 126 issues.

One could let someone without an account take full remote control of its Email Protection Ga…

https://en.hacks.gr/i-kiteworks-diorthose-126-provlimata-ena-apo-ta-opoia-mporoyse-na-dosei-pliri-elegcho-toy-systimatos/

#Kiteworks #EmailProtectionGateway #SecurityUpdates
October 2, 2026 at 8:06 AM
Felt like churn until a 4.7.8 OpenSSL update saved our project from a critical CVE, now dependency updates are less stressful. #DevOps #SecurityUpdates
September 26, 2026 at 5:01 PM
Rod's Saturday Funnies: September 18, 2026 - Where the cyber-villains get pie-in-the-face treatment and the zero-days trip over their own exploit code

#RodsSaturdayFunnies #CybersecurityHumor #TechNews #SaturdayCartoons #CyberSafety #TechLaughs #Securit…
https://go.rodtrent.com/go/xd8cdbe
September 19, 2026 at 1:35 PM
Rod's Saturday Funnies: September 12, 2026 - The Week That Tried to Break Everything (and Mostly Succeeded, with Style)

#RodsSaturdayFunnies #CybersecurityHumor #TechNews #SaturdayCartoons #CyberSafety #TechLaughs #SecurityUpdates
https://go.rodtrent.com/go/vgeakrp
September 12, 2026 at 1:35 PM
How To Patch After Microsoft Confirms 973 Security Vulnerabilities www.forbes.com/sites... #Microsoft #Windows #973Vunerabilities #SecurityUpdates
September 10, 2026 at 1:02 PM
[New Post] 📌Microsoft Fixes 973 Security Vulnerabilities and 2 Zero-Day Vulnerabilities in September 2026 Patch Tuesday -
www.anoopcnair.com/microsoft-fi...
#Microsoft #PatchTuesday #September2026 #WindowsSecurity #SecurityUpdates #CyberSecurity #MicrosoftSecurity #ZeroDay #Vulnerabilities #CVE
September 10, 2026 at 8:36 AM
macOS Tahoe 26.7 RC4 (25G229) and Sequoia 15.8 RC4 (24H23) now available—minor fixes and security tuned. #macOS #SecurityUpdates #Apple #Tahoe #Sequoia #BetaRelease https://thedailytechfeed.com/apple-releases-4th-rcs-for-macos-tahoe-26-7-and-sequoia-15-8/
September 9, 2026 at 7:02 PM
September 5, 2026 at 1:35 PM
Researchers spotted apparent attack attempts against Citrix NetScaler devices used for remote access.

No breach is confirmed, but the number of exposed…

https://en.hacks.gr/citrix-netscaler-sovaro-keno-asfaleias-epitrepei-prosvasi-choris-logariasmo/

#CitrixNetScaler #RemoteAccess #SecurityUpdates
September 4, 2026 at 3:46 PM