Latest coverage, page 11

Everything we've published, newest first, across threats, news, research, analysis and guides.

324 articlesUpdated 28 Sep 2026Page 11 of 14

ThreatsCloud & SaaSCritical
Linux Kernel IPv6 Privilege Escalation Flaw Weaponized for Local Root Compromise
CISA added CVE-2026-53362 to its KEV catalog, warning of active privilege escalation exploits targeting the Linux Kernel IPv6 networking subsystem across major enterprise distros.
Daniel Okafor15 Sep 20268 min read
ThreatsIndustrial & OTCritical
Rockwell Automation Logix Controllers Exposed to Critical Remote Firmware Tampering Flaws
CISA alerted industrial manufacturing operators to severe vulnerabilities in Rockwell Automation Logix controllers and 1756 communication modules allowing PLC tampering.
Mei-Lin Chen14 Sep 20267 min read
ThreatsEnergy & UtilitiesHigh
AVEVA Pipeline Integrity Monitor Vulnerabilities Threaten Critical Energy Infrastructure
CISA issued an energy sector ICS advisory warning of memory corruption and authentication defects in AVEVA Pipeline Integrity Monitor supervising oil and gas transport.
Daniel Okafor14 Sep 20268 min read
ThreatsHealthcare & PharmaCritical
NextGen Mirth Connect Critical RCE Flaws Expose Healthcare HL7 Data Pipelines
CISA published an urgent medical ICS advisory detailing critical RCE vulnerabilities in NextGen Mirth Connect integration engines routing hospital clinical records.
Priya Raman14 Sep 20268 min read
IndustryGov & Defence
CISA Finalizes CIRCIA Mandate: 72-Hour Incident and 24-Hour Ransomware Reporting Enforced
CISA issued its landmark final rule under CIRCIA, legally mandating critical infrastructure operators report major cyber incidents within 72 hours and ransom payments within 24 hours.
Tom Verhoeven14 Sep 20268 min read
ResearchCloud & SaaS
CISA, NSA, and FBI Warn Critical Infrastructure of Advanced AI Model Extraction Campaigns
A joint cybersecurity advisory from CISA, NSA, and FBI alerts defense contractors and cloud vendors to sophisticated state-sponsored AI model extraction campaigns.
Daniel Okafor14 Sep 20269 min read
ThreatsIndustrial & OTCritical
SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass
SAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.
Aisha Noor14 Sep 20268 min read
NewsBanking & Fintech
CERT-In Warns of Massive Android Smishing Campaign Masquerading as Traffic E-Challans
CERT-In issued advisory CIAD-2026-0038 warning against an aggressive smishing blitz delivering trojanized APKs disguised as official Parivahan traffic e-challan notices.
Mei-Lin Chen14 Sep 20267 min read
ThreatsCloud & SaaSCritical
Broadcom Discloses Critical VMware Hypervisor Escape Flaws in Workstation and Fusion
Broadcom issued critical fixes for VMware Workstation and Fusion addressing CVE-2026-59346, an out-of-bounds write flaw in VMXNET3 allowing guest-to-host breakouts.
Priya Raman14 Sep 20268 min read
NewsCloud & SaaS
Google September 2026 Android Bulletin Patches Critical System Zero-Click RCE Flaws
Google’s September 2026 Android security update resolves 34 vulnerabilities, led by critical zero-click remote code execution defects in the Android System framework.
Mei-Lin Chen14 Sep 20267 min read
ThreatsTelecom & MediaHigh
Cisco Fixes High-Severity Memory Corruption Flaw in Carrier-Grade IOS XR Routing Core
Cisco resolved CVE-2026-20274, an unauthenticated memory corruption flaw in IOS XR software that enables crash-loops or remote code execution in telecommunications cores.
Daniel Okafor14 Sep 20267 min read
ThreatsCloud & SaaSCritical
Ivanti Patches Critical Remote Code Execution Flaw in Neurons for ITSM Infrastructure
Ivanti released emergency security patches addressing CVE-2026-12650, an unauthenticated deserialization RCE vulnerability in Neurons for ITSM on-premise deployments.
Priya Raman14 Sep 20268 min read
ThreatsCloud & SaaSCritical
Citrix NetScaler CVSS 9.3 authentication bypass CVE-2026-19490 under active in-the-wild exploitation
CISA and threat researchers warn that CVE-2026-19490 in Citrix NetScaler ADC and Gateway is under active exploitation, granting unauthenticated access to perimeter gateways.
Daniel Okafor14 Sep 20266 min read
NewsGov & Defence
Florida DMV confirms DAVID driver database breach after officer credentials compromised on personal device
Florida’s motor vehicle department confirmed an intrusion into its DAVID database after an officer’s credentials were stolen by infostealers; ShinyHunters claims 200,000+ driver records.
Priya Raman14 Sep 20265 min read
$3D technical illustration of fractured Microsoft Defender security shield and race condition threads exposing NT AUTHORITY SYSTEM core access$
ResearchCloud & SaaS
'ShieldCrash' exploit bypasses Microsoft Defender patch, enabling local SYSTEM file access
A zero-day exploit dubbed ShieldCrash bypasses Microsoft Defender’s latest patches, weaponizing a TOCTOU race condition in the engine to read files as SYSTEM.
Mei-Lin Chen14 Sep 20267 min read
InsightsCloud & SaaS
EU Cyber Resilience Act reporting rules go live: Hardware and software vendors face mandatory 24-hour disclosures
The EU CRA’s early reporting mandate is now in effect, requiring manufacturers to report actively exploited vulnerabilities to ENISA and CSIRTs within 24 hours.
Tom Verhoeven14 Sep 20266 min read
NewsCloud & SaaS
Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server
Enterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
Aisha Noor14 Sep 20265 min read
ThreatsCloud & SaaS
Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise
Microsoft says attackers are using passkey and SSO update pretexts to capture sessions, add MFA methods and collect Microsoft 365 data.
Aisha Noor13 Sep 20266 min read
ThreatsCloud & SaaS
GitHub adds a merge gate for pull requests with unresolved secret alerts
GitHub’s new ruleset can block pull-request merges until selected secret-scanning alerts are resolved, adding a review-stage guard beyond push protection.
Daniel Okafor13 Sep 20265 min read
ThreatsRetail & E-commerceCritical
Adobe warns of exploited Commerce and Magento RCE — patch CVE-2026-75650 now
Adobe says attackers are exploiting a critical, unauthenticated Commerce and Magento flaw. Merchants should apply the vendor hotfix and rotate exposed secrets.
Priya Raman13 Sep 20266 min read
ThreatsCloud & SaaSCritical
Cisco Secure FMC authentication bypass CVE-2026-20079 exploited by Qilin ransomware affiliates
Threat actors and Qilin ransomware affiliates are actively weaponizing CVE-2026-20079 in Cisco Secure FMC to bypass web authentication and achieve root command execution.
Daniel Okafor13 Sep 20266 min read
ThreatsCloud & SaaSCritical
Swarm of OpenAI agents flooded RubyGems to execute code and harvest data on RubyDoc servers
Security researchers trace a coordinated supply-chain assault on RubyGems to thousands of autonomous OpenAI agents that achieved code execution on RubyDoc.info infrastructure.
Mei-Lin Chen13 Sep 20267 min read
ThreatsTelecom & MediaCritical
Chinese state-aligned group UNC3569 exploited zero-day flaw in Sogou Input Method to drop GRAYRABBIT backdoor
A zero-day flaw in Sogou Input Method—used by 455M people monthly—allowed Chinese threat actor UNC3569 to execute arbitrary code and install the GRAYRABBIT backdoor.
Mei-Lin Chen12 Sep 20266 min read
ThreatsTelecom & MediaHigh
Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions
Bitdefender reveals threat actors are exploiting Google Play’s Early Access program to bypass user reviews and star ratings, pushing deceptive apps with over 1M downloads.
Aisha Noor12 Sep 20265 min read