Microsoft's August 2026 Patch Tuesday fixes around 400 vulnerabilities, including a Windows kernel zero-day already being exploited by North Korea's Lazarus Group. Here is what to patch and why it matters for your business.

WordPress 7.0.3, released 6 August 2026, patches CVE-2026-64638 (XSS2Shell) -- a high-severity login-screen flaw that can be chained to full server takeover. Here is what you need to check and do.

CISA has flagged a Fortinet FortiOS patch bypass as actively exploited. If your firewall ran a vulnerable version, patching alone may not be the whole story. Here is what to check.

CVE-2026-34486 is actively exploited by an AI-automated attack campaign targeting Apache Tomcat servers. Find out if your business is at risk and what to patch immediately.

A critical unpatched vulnerability (CVE-2026-57807, CVSS 9.8) in the miniOrange WordPress OAuth SSO plugin lets attackers log in as administrator with no password. Here is what site owners need to do immediately.

A deliberate backdoor in version 10.8.7 of the popular ARVE WordPress plugin lets attackers log in as an administrator without a password. Here is what to check and what to do.

Microsoft 365 went down for 12 hours on 31 August, the third outage of 2026. Here is what to do when it happens, and how to keep your business running next time.

A critical unauthenticated vulnerability in WordPress Core, nicknamed wp2shell, is being actively exploited. If you run a WordPress site, check and update to version 6.9.5 or 7.0.2 immediately.