#vulnerability-management

Every article tagged #vulnerability-management, across topics.

3 articlesLatest 30 Oct 2026

30 Oct 2026

Android SMS of Death: how one WAP Push text crashes the phone process, and the patch Google calls won't fix

How the SMS of Death WAP Push bug crashes com.android.phone, why it loops for days, what the AOSP fix changes, and how to check your patch level.

#security #patching #vulnerability-management

21 Oct 2026

System architecture10 min read

PHP2Shell (CVE-2026-109618, CVE-2026-109619): which PHP servers are exposed and how to patch today

PHP2Shell is two pre-auth RCE bugs in PHP itself. Which versions fix them, which servers are most exposed, and what to set if you cannot update today.

#security #vulnerability-management #php

16 Oct 2026

System architecture9 min read

Microsoft's record October 2026 Patch Tuesday: how to triage 1,400 CVEs with exploit status, risk cohorts and VEX

October's Patch Tuesday fixed about 1,400 CVEs. A triage order, what risk cohorts miss, VEX, and a script that sorts the release.

#security #best-practices #windows