Less panic patching, more precision

A Cisco Talos feed summarizing recent research and disclosures: guidance to prioritize patching using EPSS/GCVE instead of only CVSS; technical DICOM heap-overflow research; four heap-based buffer overflows in MediaArea's MediaInfoLib; introduction of EvidenceForge synthetic security logs; multiple disclosed vulnerabilities in TP-Link, Adobe Photoshop, OpenVPN, and Norton VPN; an observed BadIIS MaaS ecosystem; active exploitation of an authentication-bypass in Cisco Catalyst SD‑WAN (CVE-2026-20182); Microsoft May 2026 Patch Tuesday (137 vulnerabilities, 16 marked critical); and disclosure of/