Live threats
HighUnpatched Check Point Gateways Exploited via PHP2Shell, Granting Root Access and Enabling Wiper Attacks BreachUS DOJ Seizes $1.2 B Stolen from Binance Theft and Disrupts North Korean ‘FaceStealer’ Social‑Engineering Tool Rule changeFederal Register limits automated scraping of its sites, directing users to APIs DeadlineNARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests CriticalPostgreSQL 18.7‑14.25 Update Patches 52 Vulnerabilities, Ends Support for PostgreSQL 14 BreacheMudhra Revokes Eight Additional Intermediate Certificates After Private‑Key Exposure Rule changeEDPB adopts adequacy declaration for South Korea, final BCR‑ST recommendations and selects AI recruitment for 2027 coordinated enforcement CriticalN‑able ‘4EverAble2Shell’ Zero‑Day Exploited Hours After PoC Release, Compromising 21 RMM Servers
Updated 08:43 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
BREACH WATCH BRIEF Critical 🗄️ Vulnerability

PostgreSQL 18.7‑14.25 Update Patches 52 Vulnerabilities, Ends Support for PostgreSQL 14

PGDG released patches for five PostgreSQL branches fixing 52 vulnerabilities, including 32 CVEs rated 8.8. The update also ends security support for PostgreSQL 14, forcing organizations to migrate. Prompt patching is essential for maintaining control‑assurance across frameworks.

ADTP Breach Watch · November 12, 2026 · Help Net Security
SeverityCritical
Type🗄️ Vulnerability
ConfidenceHigh
ReportedNov 12, 2026
Technology & SaaS Technology/SaaS providers Enterprises running PostgreSQL in cloud or on‑premise Vulnerability Exploit

What happened

PostgreSQL released updates for versions 18‑14 fixing 52 security bugs, many high‑severity code‑execution flaws, and client‑tool injection issues; version 14 is now end‑of‑life.

Why it matters for trust and compliance

  • The incident underscores the need for a robust patch‑management control that provides continuous evidence of timely remediation, a requirement across NIST CSF, ISO 27001 and other frameworks.
  • Map patch‑management activities to the control objective of timely vulnerability remediation.
  • Collect and retain evidence of upgrade, reindexing, and backup validation for audit readiness.

Who is affected

Technology/SaaS providers Enterprises running PostgreSQL in cloud or on‑premise

Recommended actions

  1. Identify all PostgreSQL instances, upgrade to the latest supported branch, and apply client‑tool updates.
  2. Reindex affected indexes and take a fresh full backup before resuming incremental backups.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analyzed for practitioners, in one email.