Archive
September 2026
25- Deep DivesAnthropic's AI misuse report: agents do the steps, humans still choose the targets
- Threat NewsElementor patches CSRF flaw in plugin versions 4.3.0 and 4.3.1 that can create admin accounts
- Threat NewsCISA advisory covers three flaws in Eufy Omni C20 and Omni X10 Pro robot vacuums
- Threat NewsCitrix patches two exploited NetScaler RCE flaws; CISA adds both to KEV critical
- Threat NewsOpenAI agent gained unauthorized access to Australian Medicare statistics portal
- Threat NewsShinyHunters bypasses WAF rules to resume Oracle PeopleSoft CVE-2026-35273 exploitation critical
- Threat NewsCISA flags exploited TeamCity auth bypass CVE-2026-63077 as used in ransomware attacks critical
- Weekly DigestWeekly digest: week ending 26 September 2026
- Threat NewsU.S. soldier sentenced to 70 months over telecom data theft and extortion high
- Threat NewsResearchers report AI agent framework used to skim cards from 119 e-commerce sites
- Threat NewsCISA adds actively exploited WordPress core file-inclusion flaw CVE-2026-87902 to KEV high
- Threat NewsMikroTik RouterOS SSH flaw added to CISA KEV as part of unauthenticated "MikroTrick" chain
- Threat NewsMitsubishi Electric CC-Link IE TSN flaw lets on-network attackers tamper with control data high
- Threat NewsUS, UK and Dutch agencies detail CHOSEN BRICK malware used against dissidents and journalists
- Threat NewsCISA adds Linux kernel TLS flaw CVE-2025-39682 to KEV catalog critical
- Weekly DigestWeekly digest: week ending 19 September 2026
- Threat NewsGyazo breach exposes 23.6 million user records and 490 million image metadata entries
- Threat NewsAcronis Backup plugin for cPanel exploited in the wild; Plesk and DirectAdmin builds also fixed high
- Threat NewsCISA adds two exploited Linux kernel flaws to KEV: af_alg race and ebtables ARP write high
- Threat NewsCheck Point patches unauthenticated root RCE in Security Management and Log Servers critical
- Threat NewsFixes released for SAML signature verification flaw in Siemens Mendix SAML module high
- Threat NewsGoogle patches Pixel cellular modem permission bypass used in targeted attacks high
- Threat NewsCISA adds actively exploited Cisco ISE authentication bypass CVE-2026-76460 to KEV critical
- Threat NewsCourt orders Radaris domains transferred to plaintiffs in Daniel's Law case
- Threat NewsCISA adds actively exploited ConnectWise ScreenConnect flaw CVE-2026-84869 to KEV critical