Security Notices
CVE-2026-85880: Windows ALPC local privilege escalation
This exploited Windows ALPC flaw lets code in a low-privilege AppContainer escape to SYSTEM. Match the host's release and architecture to its security update; patch completion does not exclude earlier endpoint compromise.
CVE-2026-81963: Windows Update Stack privilege escalation to SYSTEM
An exploited Windows Update Stack flaw can elevate a local attacker to SYSTEM. Match the Windows release to its verified KB and build, then investigate suspicious endpoint activity separately from confirming the update.
Check Point Confirms Active Exploitation of VPN RCE CVE-2026-85102
Check Point reports active exploitation of a pre-authentication VPN certificate-handling flaw. Match Security Gateway or Spark builds to the supported fix, preserve logs, and investigate suspicious Mobile Access logins separately from patch installation.
Palo Alto Updates GlobalProtect CVE-2026-0307 Fixed Builds
Palo Alto revises GlobalProtect CVE-2026-0307 fixed builds. Update both clients and infrastructure, validate the paired fix, and retain evidence.