PatchDayAlert
Subscribe →

Free · Wednesday mornings

The weekly digest. Straight to your inbox.

Written for sysadmins. Not security researchers. Not CISOs. You: the person who just got 12 CISA tickets assigned with zero context and is expected to triage them by lunch.

One issue, every Wednesday. The week Microsoft ships Patch Tuesday, it's in the same issue.

New subscribers get the CVE triage cheat sheet, a printable one-pager for triaging fresh CVEs, in the welcome email.

What you get

  1. 01

    Plain-English CVE summaries

    If you can't read a CVE writeup cold and know what to do, the digest is for you. No CVSS jargon dumps.

  2. 02

    Patch urgency in one line

    Patch today, patch this week, or safe to skip. Every entry. No ambiguity about what the ticket needs.

  3. 03

    Exploited-in-the-wild front and center

    CISA KEV catches things NVD-severity alone misses. Anything actively exploited gets flagged before anything else.

  4. 04

    Rare alerts when it can't wait

    Most weeks, Wednesday is soon enough. When something is actively exploited and a fix exists, you get a separate heads-up. Only when it matters, never for filler.

Latest sample issue

Aug 17, 2026 · Subject: HPC Pack RCE (9.8), KVM guest escape, 3 more

HPC Pack 9.8 deserialization RCE, KVM guest-to-host escape, and Teams XSS

Monday starts with a 9.8 you might not have on your radar. CVE-2026-59124 is an unauthenticated deserialization RCE in Microsoft HPC Pack 2019: no login, no user interaction, trivial attack surface. Nobody's exploiting it yet, but that won't last long if your HPC nodes are internet-reachable. Four more behind it, including a KVM nested-virt bug that lets a guest VM mess with host interrupts and two XSS issues in Teams for Android and Azure Storage Explorer.

One item / urgency verdict

Patch immediately

CVE-2026-59124

An attacker can send malicious serialized data to Microsoft HPC Pack 2019 over the network and get code execution, no authentication required.

Apply the latest Microsoft security update for HPC Pack 2019 and verify your HPC head nodes are not exposed to the internet.

Read the full issue Browse archive