CISA

Plex Media Server Exploit Chain Under Mass Attack as a Third of Installs Stay Unpatched

by
Plex Media Server Exploit Chain Under Mass Attack as a Third of Installs Stay Unpatched

Plex has confirmed that a chain of vulnerabilities in Plex Media Server, first documented in September, is now “being actively and widely exploited.” The wording appears verbatim in a security notice the company refreshed on 19 October, and it marks the moment a quietly patched bug class turned into a live, internet-wide campaign. Chained together, … Read more

Microsoft’s Biggest Patch Tuesday Ever: 1,413 Fixes and One Zero-Day Under Attack

by
Microsoft’s Biggest Patch Tuesday Ever: 1,413 Fixes and One Zero-Day Under Attack

Microsoft shipped its October 2026 Patch Tuesday on October 13, and the release has rewritten the record books: somewhere between 1,407 and 1,415 vulnerabilities were closed in a single monthly batch, the first four-digit total in the programme’s 23-year history and more than the roughly 1,100 fixes Microsoft shipped across the whole of 2025. The … Read more