March 2026 Patch Tuesday: what Security and IT teams should prioritise
March 2026 Patch Tuesday covers 86 approved patch records and 167 unique CVEs across Microsoft, Adobe and SAP.
Security
Vulnerabilities, defensive security, architecture and operational security.
VMware’s Support-Assisted Migration Could Open an RCE Window
CISA says attackers exploited a VMware command-injection flaw that became reachable during support-assisted migration. Two more CVEs share the bulletin.
China-Linked Hackers Hid Inside Dell’s Disaster-Recovery Appliances Since 2024
Suspected China-linked hackers exploited Dell RecoverPoint appliances for root access, covert persistence and a route into protected virtual machines.
Notepad++ Downloaded the Update. It Never Checked Who Made It.
Attackers exploited Notepad++ update verification failures to redirect users toward malicious installers while official repository files remained clean.
February 2026 Patch Tuesday: what Security and IT teams should prioritise
February 2026 Patch Tuesday covers 85 approved patch records and 131 unique CVEs across Microsoft, Adobe and SAP.
BeyondTrust Was Supposed to Provide Remote Support. Attackers Turned It Into a Remote Shell.
Attackers exploited a pre-authentication BeyondTrust flaw and deployed remote-access malware through infrastructure built to support privileged systems.
Reset the SmarterMail Admin Password, Then Take the Server
An anonymous SmarterMail endpoint let attackers reset a system administrator, then use built-in management functions to reach server control.
One FortiCloud Account Could Reach Someone Else’s Fortinet Device
Fortinet says attackers exploited a cloud SSO isolation flaw to enter other customers' devices, download configurations and add local administrators.
January 2026 Patch Tuesday: what Security and IT teams should prioritise
January 2026 Patch Tuesday covers 63 approved patch records and 156 unique CVEs across Microsoft, Adobe and SAP.
December 2025 Patch Tuesday: what Security and IT teams should prioritise
December 2025 Patch Tuesday covers 86 approved patch records and 211 unique CVEs across Microsoft, Adobe and SAP.