Network appliances go more than a year without patches as exploits speed up

The median vulnerability on enterprise network appliances stays unpatched for more than a year, Microsoft’s own telemetry shows, even as the most damaging software flaws are being weaponized within days of disclosure. Microsoft Security Research reported the findings Monday in an analysis of roughly 383,000 CVEs disclosed from 1999 through September 2026. It shows that the median time to patch a vulnerability exceeds…

Vulnerabilities & Zero-Day IoT & OT Security Threat Intelligence Networking & Internet Operating Systems Identity & Access Security
Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Help Net Security

Novee puts forgotten internet-facing assets through penetration testing

Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) tools. “Attackers don’t limit themselves to the applications you’re already testing. They look for anything exposed t…

Industrial Cyber

Industrial AI adoption outpaces security readiness, leaving OT environments exposed to emerging threats

AI implementation across OT (operational technology) and ICS (industrial control systems) environments is outpacing security measures that organizations... The post Industrial AI adoption outpaces security readiness, leaving OT environments exposed to emerging threats appeared first on Industrial Cyber.

CyberInsider

Android November update fixes critical flaws and ‘SMS of Death’ bug

Google’s November 2026 Android security bulletin addresses 23 critical vulnerabilities, including remote code execution flaws and the recently disclosed “SMS of Death” bug that can silently disconnect calls. The security bulletin lists fixes across Android’s Framework, System, runtime, kernel, and hardware vendor components. Devices with a security patch level of 2026-11-05 or later address all … The post Android Nov…

Industrial Cyber

CISA urges critical infrastructure owners to prioritize OT security, operational continuity, recovery planning in 2026 campaign

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) launched on Monday its 2026 Critical Infrastructure Security and Resilience... The post CISA urges critical infrastructure owners to prioritize OT security, operational continuity, recovery planning in 2026 campaign appeared first on Industrial Cyber.