Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Archive

Latest coverage, page 8

Everything we've published, newest first, across threats, news, research, analysis and guides.

324 articlesUpdated 28 Sep 2026Page 8 of 14

ThreatsCloud & SaaSCritical
Check Point Security Gateways Targeted in Zero-Day VPN Credential Theft Attacks
CISA orders emergency patching of Check Point Security Gateway flaw CVE-2026-50751 enabling unauthenticated perimeter VPN bypass and network takeover.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Cisco Catalyst SD-WAN Manager Critical Directory Traversal Flaws Weaponized in Active Attacks
CISA orders emergency remediation of Cisco Catalyst SD-WAN Manager flaws CVE-2026-20262 and CVE-2026-20245 enabling remote administrative root takeover.
CST Newsroom18 Sep 202611 min read
InsightsCloud & SaaS
Azure Security Advisory: Cloud Foundry BOSH CPI Stemcell Code Injection Flaw Dissected
Technical analysis of Azure Cloud Provider Interface vulnerability CVE-2017-4964 enabling arbitrary code injection into virtual machines during deployment.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSCritical
Splunk Enterprise Critical Authentication Bypass Flaw Exploited in Active Corporate Infiltration Attacks
CISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Ivanti Sentry Critical OS Command Injection Flaw Exploited in Perimeter Infiltration Attacks
CISA adds Ivanti Sentry vulnerability CVE-2026-10520 (CVSS 9.8) to KEV catalog following active zero-day exploitation against corporate mobile gateways.
CST Newsroom18 Sep 202611 min read
ThreatsIndustrial & OTCritical
Lantronix EDS5000 Industrial Device Servers Hit by Critical Remote Code Injection Flaw
CISA adds Lantronix EDS5000 industrial serial device server vulnerability CVE-2025-67038 to KEV catalog following active exploitation against OT networks.
Tom Verhoeven18 Sep 202610 min read
InsightsCloud & SaaS
India DPDP Act Enters Phase 2: DPBI Enforcement, Mandatory Breach Notification & ₹250 Cr Penalties
India initiates DPDP Act Phase 2 enforcement establishing Data Protection Board inquiries, mandatory breach disclosures, and penalties up to ₹250 Crore.
Daniel Okafor18 Sep 202612 min read
ThreatsCloud & SaaSHigh
Cisco IOS Cross-Site Request Forgery Flaw Exploited to Hijack Core Enterprise Routers
CISA adds Cisco IOS HTTP server CSRF flaw CVE-2008-4128 to KEV catalog following active in-the-wild exploitation to alter router configuration registers.
CST Newsroom18 Sep 202611 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric CC-Link IE TSN Protocol Flaws Expose Factory Automation Cells
CISA issues ICS-CERT advisory ICSA-26-211-07 warning of critical protocol implementation flaws in Mitsubishi Electric CC-Link IE TSN industrial controllers.
Tom Verhoeven18 Sep 202610 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization & Auth Bypass Flaws Under Active Cyberattack
CISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
Priya Raman18 Sep 202612 min read
ThreatsIndustrial & OTHigh
KNX Building Automation Protocol Denial-of-Service Flaw Exploited Against Critical Infrastructure
CISA adds KNX industrial building automation protocol vulnerability CVE-2023-4346 to KEV catalog following active exploitation against critical OT facilities.
Tom Verhoeven18 Sep 202610 min read
ResearchCloud & SaaS
Langflow AI Pipeline Remote Code Execution Flaws Exploited in Enterprise LLM Deployments
CISA adds critical Langflow AI vulnerabilities CVE-2026-0770 and CVE-2026-55255 to KEV catalog as threat actors weaponize agentic pipeline execution flaws.
Aisha Noor18 Sep 202611 min read
NewsCloud & SaaS
CenterPoint Energy Form 8-K Disclosure: Unauthorized Access to Customer Accounts via External Web Portal
CenterPoint Energy files Form 8-K disclosing an unauthorized intrusion into customer account systems via external-facing web portal infrastructure.
CST Newsroom17 Sep 202614 min read
ResearchCloud & SaaS
Agentic AI Security Breakdown: How Indirect Prompt Injections Hijack Autonomous Tool-Calling Agents
Analysis of emerging frontier AI threat vectors: how indirect prompt injections in untrusted documents hijack tool-calling autonomous LLM agents.
Priya Raman17 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Security Advisory: Linux Kernel vhost vring Cache Corruption Flaw CVE-2026-74580 Patched via Livepatch
AWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
Daniel Okafor17 Sep 202613 min read
ThreatsIndustrial & OTHigh
Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws
CISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Aisha Noor17 Sep 202612 min read
ThreatsCloud & SaaSCritical
Adobe ColdFusion Critical Path Traversal Flaw CVE-2026-48282 Exploited in Active Attacks
CISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
Mei-Lin Chen17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Cisco Unified Communications Manager SSRF Flaw Weaponized in Enterprise Attacks
CISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Tom Verhoeven17 Sep 202612 min read
ThreatsCloud & SaaSHigh
Ubiquiti UniFi OS Input Validation Vulnerability CVE-2026-34910 Weaponized Against Enterprise Network Edge
CISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.
Aisha Noor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
WordPress Core Critical SQL Injection Flaw CVE-2026-60137 Exploited in Mass Web Attacks
CISA incorporates WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 (CVSS 9.8) into KEV catalog following active in-the-wild web attacks.
CST Newsroom17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Red Hat ABRT Crash Reporting Daemon Flaw CVE-2015-5287 Weaponized for Linux Root Privilege Escalation
CISA adds Red Hat ABRT vulnerability CVE-2015-5287 (CVSS 7.8) to KEV catalog following active exploitation against enterprise Linux host infrastructure.
Priya Raman17 Sep 202612 min read
ThreatsCloud & SaaSCritical
SimpleHelp Remote Support Platform Critical Authentication Bypass CVE-2026-48558 in Active Attacks
CISA adds SimpleHelp remote support platform vulnerability CVE-2026-48558 (CVSS 9.8) to KEV catalog following active exploitation against enterprise networks.
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
N-able N-central Critical Authentication Bypass CVE-2026-18577 Exploited in MSP Supply Chain Attacks
CISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.
Mei-Lin Chen17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Red Hat Enterprise Linux libuser Race Condition Flaw Exploited for Local Root Escalation
CISA adds Red Hat libuser vulnerability CVE-2015-3246 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation for root privilege escalation.
Tom Verhoeven17 Sep 202612 min read