Technology, Cloud & SaaS — Cybersecurity News & Threat Intelligence — Page 13

309 articlesUpdated 6 Oct 2026Page 13 of 13

ThreatsCloud & SaaSCritical
Microsoft ships 973 fixes in September Patch Tuesday, two flaws already exploited
Microsoft’s September 2026 rollup addresses 973 CVEs, including two elevation-of-privilege bugs — in the Windows Update Stack and ALPC — confirmed under active attack.
Priya Raman10 Sep 20267 min read
ThreatsCloud & SaaSCritical
SAP OVERPASS: CVSS 10.0 Kernel Flaw Enables Pre-Auth Remote Code Execution
SAP and Onapsis disclosed OVERPASS (CVE-2026-44756), a maximum-severity kernel flaw in Extended Passport processing enabling unauthenticated root RCE on enterprise ERP hosts.
Priya Raman9 Sep 20266 min read
InsightsEnergy & Utilities
The EU AI Act's High-Risk Rules Slipped to December 2027. Your Logging Problem Did Not Move
Regulation (EU) 2026/1744 pushed Annex III high-risk obligations to December 2027, but Article 12 logging, Article 14 oversight and Article 15 hardening are engineering work you cannot start late.
Tom Verhoeven9 Sep 20266 min read
ResearchCloud & SaaS
BlueMoon Exploit Kit: Chrome V8 Zero-Day Chained with Windows Kernel Escalation
Proofpoint disclosed the BlueMoon exploit kit weaponizing Google Chrome V8 flaws (CVE-2026-87491) alongside Windows kernel privilege escalation in state-aligned espionage attacks.
Mei-Lin Chen9 Sep 20266 min read
InsightsCloud & SaaS
88% Had an AI Agent Incident. 82% Believe Their Policy Covers It.
Gravitee says 88% of organisations had a confirmed or suspected AI agent incident, while 82% of executives trust their policy. Both figures, one population.
Priya Raman9 Sep 20266 min read
ResearchCloud & SaaS
DeepSeek Harness Vulnerability Allowed AI Coding Agents to Disable Their Sandbox
OX Security and VulnCheck disclosed CVE-2026-82533 in DeepSeek Harness, where prompt injection allowed sandboxed AI coding agents to disable their own security isolation.
Mei-Lin Chen9 Sep 20265 min read
ResearchEducation & Academia
Screening Serpens shipped six RAT builds in ten weeks. The config file is what gives them away
Unit 42 documented six new RAT variants from Iran-nexus Screening Serpens between February and April 2026. The hashes rotate; the AppDomainManager config file does not.
Mei-Lin Chen9 Sep 20266 min read
ThreatsCloud & SaaSCritical
N-able N-central Pre-Auth RCE Flaw Under Active Exploitation (CVE-2026-86218)
CISA issued an emergency KEV addition for CVE-2026-86218, an unauthenticated static code injection flaw in N-able N-central RMM servers actively exploited against MSP networks.
Daniel Okafor8 Sep 20265 min read
GuidesIndustrial & OT
Playbook: hardening the edge appliance you cannot put an agent on
Two of this year’s fastest CISA remediation deadlines hit devices that cannot run EDR. A practical checklist for the class attackers reach for first.
Aisha Noor8 Sep 20267 min read
ThreatsIndustrial & OTCritical
PAN-OS authentication bypass CVE-2026-0257 puts firewall management planes at risk
A newly catalogued authentication bypass in Palo Alto Networks PAN-OS lets an unauthenticated attacker reach management functionality. Here is the exposure and the fix.
Daniel Okafor8 Sep 20266 min read
ThreatsCloud & SaaSCritical
FreeIPA LDAP ACI Vulnerability Chain Grants Anonymous Clients Domain Admin Rights
Red Hat patched CVE-2026-76578 (CVSS 9.8) in FreeIPA and 389 Directory Server, where an LDAP Access Control Instruction flaw allowed unauthenticated clients to create permanent domain admins.
Tom Verhoeven8 Sep 20265 min read
GuidesCloud & SaaS
Hardening guide: locking down your npm and CI/CD supply chain
A practical, ordered checklist for defending against malicious packages and install-time credential theft — with the exact commands and settings.
Mei-Lin Chen7 Sep 20269 min read
InsightsCloud & SaaS
MFA failed in 84% of incident responses. The problem is the session, not the factor
With 99% of SaaS compromises originating at the identity provider, MFA is no longer the control organisations think they bought. Here is what changed.
Aisha Noor6 Sep 20267 min read
ResearchEducation & Academia
Breakout time falls to 72 minutes — and most SOCs are not built for it
The 2026 benchmark from foothold to active exfiltration is 72 minutes, a fourfold reduction. Human-paced triage no longer fits inside the window.
Priya Raman5 Sep 20267 min read
ThreatsCloud & SaaSCritical
ChainDrop worm spreads through hundreds of npm packages, stealing CI/CD secrets
A self-propagating worm compromised hundreds of popular npm packages, harvesting cloud keys and CI tokens then using them to publish further poisoned releases.
Mei-Lin Chen5 Sep 20268 min read
ThreatsCloud & SaaSHigh
Enterprise app CVE roundup: PeopleSoft, cPanel, Artifactory and Switchvox all need attention
Four high-severity vulnerabilities in widely deployed enterprise software — including a build-artefact repository that sits directly in the software supply chain.
Priya Raman4 Sep 20266 min read
ResearchEducation & Academia
Attackers impersonated hundreds of brands on GitHub to push malware through search results
A campaign beginning in late June 2026 built hundreds of fake brand repositories on GitHub and used SEO to place them at the top of software download searches.
Mei-Lin Chen4 Sep 20266 min read
ThreatsTelecom & MediaCritical
Cisco Nexus 9000 Silicon One Switches Exposed to Unauthenticated Root RCE
Cisco disclosed CVE-2026-20212 (CVSS 9.8), an unauthenticated root code execution flaw on Silicon One-based Nexus 9000 datacenter switches due to open debugging ports.
Daniel Okafor3 Sep 20265 min read
InsightsBanking & Fintech
The SEC’s four-day disclosure clock in practice: materiality is the hard part
Public companies must disclose material cyber incidents within four business days. The deadline is simple; deciding what counts as material is not.
Tom Verhoeven3 Sep 20266 min read
Cyber AttackCloud & SaaS
HostDZire ransomware encrypts ESXi virtual disks across three countries
An August attack compromised multiple VMware ESXi nodes at hosting provider HostDZire, encrypting virtual disks beyond recovery across India, the Netherlands and the US.
Daniel Okafor2 Sep 20266 min read
ThreatsBanking & FintechHigh
One AiTM phishing campaign compromised 35,000 users across 13,000 organisations in three days
Adversary-in-the-middle phishing now defeats standard MFA at industrial scale. Microsoft tracked a single April 2026 campaign spanning 26 countries in 72 hours.
Aisha Noor2 Sep 20267 min read