“Patch or Perish”: A Spooky Security Tale for FlashArray, FlashBlade, and Portworx

It’s that time of year when goblins lurk in emails, phantoms haunt VPNs, and ransomware ghouls prowl the night. It’s also the last week of Cybersecurity Awareness Month, which feels about right. The scariest thing in your data center isn’t a giant spider lurking around the corner—it’s running old software with known vulnerabilities. Here’s why you should update your Purity//FA, Purity//FB, and Portworx® software now—and the not-so-urban legends to back it up.

The Monsters Are Real (and Busy)

• Attack volume keeps climbing. According to Check Point, organizations faced an average of 2,422 cyberattacks per week in August 2026, up 22% from a year earlier, and reported ransomware attacks nearly doubled over the same period.
• The monsters got faster. Average breakout time is down to roughly 29 minutes, per CrowdStrike’s 2026 Global Threat Report, and at Black Hat USA 2026 exploitation ran on small, cheap open source models in minutes. One team using a frontier model found more than 2,000 zero-days in seven weeks. The lead time defenders used to count on for patching is gone.
• What does a single bite cost? In Q2 2026, the average ransom payment jumped to $1.88M (median $150K), according to Coveware, even as the share of victims who pay hit a record low. Even when you don’t pay, IBM puts the average breach at $4.99M in 2026, a record, and one in four malicious breaches is now AI-enabled at about $6M apiece.

Your Silver Bullets (No Wolfsbane Required)

So, what can you do to protect your organization from threats? Here are a few weapons to have in your arsenal:

• Pure1® Security Assessment Center and Pure1 Anomaly Detection: Help you spot risky configurations and anomalies across FlashArray™ and FlashBlade®—things like default passwords, end-of-life versions, and unusual admin activity. Anomaly signals now flow straight to your backup platform through the Pure1 workflows with Veeam and Commvault, so the recovery team knows which restore points to trust. Use it as your always-on warding circle. Learn more about data and infrastructure security with Pure1.
• FlashArray and FlashBlade data resilience: Deliver built-in resilience against things that go bump in the night. Immutable snapshots, encryption, replication, and rapid recovery help withstand any attack. SafeMode™ Snapshots lock critical restore points against tampering—ensuring clean, recoverable data no matter what haunts your environment.
• Pure Storage Everpure Product Security and Incident Response Team (PSIRT) resources: Give you the canonical view of vulnerabilities and fixes:
• PSIRT Storage Vulnerability and Disclosure Policy: How Pure Storage Everpure handles vulnerability reporting and disclosure
• Security bulletins: Product-specific advisories
• CVE Database: Centralized Common Vulnerabilities and Exposures (CVEs) for Pure Storage Everpure products. For background on how Pure Storage Everpure packages actionable CVE info, see the blog: “Security, Simplified: How Pure Storage Delivers Actionable CVE Information.”
• Portworx: Keep clusters current, review Portworx security and trust guidance, and read release notes addressing vulnerabilities. Visit the Portworx Security and Trust Center.

What to Do before Midnight

• Check your exposure in minutes
• Review the Security Assessment in Pure1 for FlashArray and FlashBlade configurations. Check recommended remediations and anomaly alerts.
• Patch with purpose
• Prioritize critical/high bulletins first, then mediums. Track fixes via security bulletins and the CVE Database.
• Upgrade Purity and Portworx
• Stay on supported releases. Pure Storage Everpure disclosure pages and release artifacts specify fixed versions. Portworx operator notes call out security fixes.
• Lock it down with SafeMode
• Enable SafeMode snapshots on all arrays to keep recovery points untouchable—no hacker or creature of the night can delete them.
• Harden the lair
• Enforce least privilege for array admins, rotate credentials, disable unused services, and review network exposure regularly (Pure Storage Everpure security briefs and Pure1 enhancements help here). See Pure Fusion™ Everpure Fusion™ security recommendations (Pure1 login required).
• Make CVE hygiene a habit
• Bookmark PSIRT Home, security bulletins, CVE Database, and the PSIRT blog for ongoing updates. Visit the Pure Storage Everpure Product Security page.

Why This Matters Now

The threat landscape isn’t waiting for your change window. Ransomware groups posted more than a thousand victims in August 2026 alone, and the economic bite per incident keeps growing. Updating FlashArray, FlashBlade, and Portworx closes doors those creatures love to slip through, while the Pure1 Security Assessment and PSIRT give you a lantern to spot what’s lurking before it strikes.

Trick: “We’ll patch after the holidays.”

Treat: Patch now, verify with Pure1 Security Assessment, and sleep like the dead.

Stay safe out there—and happy “ghostbusting.”