Linux kernel
Restricted AF_ALG by default instead of patching again
A June 2026 kernel commit called the userspace crypto interface "a frequent source of vulnerabilities" and narrowed it to an allowlist.
All case studies
Patching
3 case studies tagged patching.
Anthropic / OpenSSH
Found 493 reachability issues, then moved 4,500 lines off the pre-auth path
Three passes over 25 projects reported 493 issues; the OpenSSH fix moved an allowlist check ahead of the parse and off the pre-auth path.
CISA / Microsoft
Turned the print spooler off
CISA and Microsoft told administrators to disable the Windows print spooler on domain controllers and on any server that does not print.