Weekly Digest
Weekly digest: week ending 26 September 2026
WordPress and MikroTik flaws land in CISA's KEV catalogue with 28 September due dates, and three governments detail an Iranian surveillance implant. Plus the rest of the week.
The week in security, curated — the few things actually worth your attention.
WordPress and MikroTik flaws land in CISA's KEV catalogue with 28 September due dates, and three governments detail an Iranian surveillance implant. Plus the rest of the week.
Cisco ISE hits CVSS 10.0 under active exploitation, CISA adds three Linux kernel flaws to KEV, and Check Point patches an unauthenticated root RCE in its management plane.
Your starter digest template: the format we'll use every week to round up the breaches, patches, and reads that actually matter.