Threats Day: Apache OFBiz RCE, Dream Host Breach, DeFi Site Hijacks + 17 More Stories
Summary: The U.K. NCSC said the widespread availability of AI-powered cyber tools has "almost certainly" driven a significant increase in zero-day vulnerability discovery, while an analysis of roughly 383,000 CVEs from 1999 through September 2026 found median patch times exceeding a year for network appliances. Microsoft reported the median vulnerability is patched in about two weeks on Windows workstations, more than a month on Windows Servers, 10+ weeks on Linux Servers and macOS applications, and beyond a year on network appliances.
What's compelling: Only about 2,000 of those 383,000 CVEs, roughly 0.5%, have been linked to real-world exploitation, yet the systems attackers most want to take over are the ones that stay exposed the longest - network appliances sitting unpatched for over a year.
Read the original at The Hacker News ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·