Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Archive

Latest coverage, page 9

Everything we've published, newest first, across threats, news, research, analysis and guides.

324 articlesUpdated 28 Sep 2026Page 9 of 14

ThreatsCloud & SaaSCritical
DD-WRT Gateway Firmware Stack Buffer Overflow CVE-2021-27137 Weaponized in Network Perimeter Attacks
CISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.
Aisha Noor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
Microsoft SQL Server Memory Corruption RCE Flaw Exploited in Database Infiltration Attacks
CISA adds Microsoft SQL Server vulnerability CVE-2019-1068 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against enterprise database clusters.
CST Newsroom17 Sep 202614 min read
ThreatsCloud & SaaSCritical
TrueConf Enterprise Server Authentication Bypass Flaw Weaponized to Access Communications
CISA mandates urgent remediation of TrueConf Server vulnerability CVE-2026-72529 (CVSS 9.8) exploited in the wild to bypass administrative access controls.
Priya Raman17 Sep 202612 min read
ThreatsCloud & SaaSCritical
Fortinet FortiSandbox Critical OS Command Injection Flaws CVE-2026-25089 & CVE-2026-39808 in Active Exploitation
CISA adds Fortinet FortiSandbox vulnerabilities CVE-2026-25089 and CVE-2026-39808 (CVSS 9.8) to KEV following active attacks against enterprise security fabrics.
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
Acronis Backup Critical Privilege Flaw CVE-2026-87886 Exploited Against Cloud Hosting Servers
CISA adds Acronis Backup plugin vulnerability CVE-2026-87886 (CVSS 9.8) to its KEV catalog following active exploitation against cPanel and Plesk hosting infrastructure.
Priya Raman17 Sep 202610 min read
ThreatsIndustrial & OTCritical
Siemens Reyrolle 7SR5 Protection Relay Vulnerabilities Expose Electrical Substations to Tampering
CISA ICS-CERT advisory ICSA-26-258-05 alerts power grid operators to critical denial of service flaws in Siemens Reyrolle 7SR5 electrical protection relays.
Daniel Okafor17 Sep 202611 min read
ThreatsCloud & SaaSHigh
Linux Kernel Watch Queue Privilege Escalation Flaw CVE-2022-0995 Weaponized in Cloud Attacks
CISA adds Linux kernel watch queue vulnerability CVE-2022-0995 to its KEV catalog following widespread weaponization in cloud container breakout attacks.
Mei-Lin Chen17 Sep 202610 min read
ThreatsCloud & SaaSCritical
Anthropic Threat Report: State-Sponsored Actors Exploit Claude for Automated Malware Evasion
Anthropic threat intelligence reveals nation-state groups, including Midnight Blizzard, attempted to weaponize Claude to automate malware obfuscation and EDR evasion.
Mei-Lin Chen17 Sep 202611 min read
InsightsCloud & SaaS
OpenAI o1 System Card: Reasoning Model Red Teaming, Cyber Capabilities & AI-ISAC Governance
OpenAI releases o1 red-teaming telemetry detailing chain-of-thought safety boundaries, autonomous cyber task planning risks, and the formation of the AI-ISAC.
Priya Raman17 Sep 202612 min read
ThreatsCloud & SaaSCritical
Cisco Identity Services Engine Critical API Flaw Weaponized to Compromise Network Access
CISA orders emergency patching of Cisco Identity Services Engine vulnerability CVE-2026-76460 (CVSS 9.8) enabling unauthenticated remote network policy takeover.
Priya Raman17 Sep 202611 min read
ThreatsCloud & SaaSHigh
Apache Tomcat Session Data Exposure Flaw Weaponized in Credential Hijacking Attacks
CISA flags Apache Tomcat vulnerability CVE-2026-34486 exploited in enterprise intrusions to intercept unencrypted session tokens and hijack authenticated user access.
Daniel Okafor16 Sep 202610 min read
InsightsCloud & SaaS
Cloud Workload Security: BOSH Azure & AWS Microservice Stemcell Privilege Escalation Analysis
Technical breakdown of cloud workload stemcell isolation defects, container escape vectors, and hypervisor boundary hardening across AWS and Microsoft Azure.
Mei-Lin Chen16 Sep 202612 min read
ThreatsCloud & SaaSCritical
Google Pixel Cellular Modem Zero-Day Flaw Exploited in Targeted Mobile Attacks
CISA adds Google Pixel baseband modem flaw CVE-2026-58704 to its KEV catalog following active zero-day exploitation against high-value target devices.
Priya Raman16 Sep 202610 min read
ThreatsIndustrial & OTCritical
Industrial OT Defense: Implementing IEC 62443 Security Levels and Purdue Model Isolation
CISA ICS-CERT advisory ICSA-26-258-01 prompts urgent implementation of IEC 62443-3-2 zone segmentation and Purdue Model controls in industrial networks.
Daniel Okafor16 Sep 202611 min read
InsightsCloud & SaaS
Cloud IAM Role Pivoting & Cross-Account Data Exfiltration: Multi-Cloud DFIR Forensics
Digital forensics analysis dissects how threat actors leverage leaked cloud credentials and cross-account IAM role assumptions to exfiltrate enterprise storage.
Mei-Lin Chen16 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization Flaw CVE-2026-50522 Exploited in Active Attacks
CISA adds Microsoft SharePoint Server deserialization flaw CVE-2026-50522 (CVSS 9.8) to its KEV catalog following active exploitation against enterprise document farms.
Priya Raman16 Sep 202611 min read
ThreatsCloud & SaaSCritical
Check Point SmartConsole Authentication Bypass Flaw Exploited to Hijack Firewall Management
CISA orders emergency remediation of Check Point SmartConsole flaw CVE-2026-16232, which allows network adversaries to bypass authentication on management servers.
Daniel Okafor16 Sep 202610 min read
InsightsCloud & SaaS
Google Cloud GKE Workload Identity Privilege Escalation: Cloud Threat Forensics & Hardening
Technical analysis of Google Cloud Platform (GCP) Kubernetes Workload Identity metadata impersonation vectors, token theft forensics, and enterprise IAM hardening.
Mei-Lin Chen16 Sep 202612 min read
ThreatsCloud & SaaSCritical
Oracle E-Business Suite Critical Privilege Escalation Flaw CVE-2026-46817 Exploited in Enterprise Intrusions
CISA adds Oracle E-Business Suite privilege management flaw CVE-2026-46817 (CVSS 9.8) to its KEV catalog following active exploitation against cloud ERP deployments.
Priya Raman16 Sep 202611 min read
ThreatsCloud & SaaSCritical
Microsoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation
CISA flags Microsoft Active Directory Federation Services vulnerability CVE-2026-56155 (CVSS 9.8) exploited in attacks forging SAML claims across hybrid Azure clouds.
Daniel Okafor16 Sep 202610 min read
InsightsCloud & SaaS
Surge in SEC Form 8-K Cyber Filings: Cloud Storage Exfiltration & Extortion Forensics
Regulatory analysis of recent SEC 8-K Item 1.05 disclosures details how threat actors leverage leaked cloud credentials and misconfigured storage to steal enterprise data.
Priya Raman16 Sep 202612 min read
ThreatsCloud & SaaSCritical
Arista VeloCloud SD-WAN Orchestrator Critical Command Injection Flaw CVE-2026-16812 Exploited in the Wild
CISA adds CVE-2026-16812 to KEV, warning of active exploitation targeting on-premise Arista VeloCloud SD-WAN Orchestrator management appliances.
Priya Raman16 Sep 202610 min read
ThreatsCloud & SaaSCritical
N-able N-central MSP Platform Authentication Bypass Flaw Weaponized in Perimeter Attacks
CISA mandates immediate remediation of CVE-2026-18556, an unauthenticated alternate path bypass in N-able N-central allowing full MSP administrative takeover.
Daniel Okafor16 Sep 20269 min read
ThreatsCloud & SaaSHigh
Fortinet FortiOS SSL-VPN Sensitive Information Disclosure Flaw CVE-2025-68686 Actively Targeted for Initial Access
CISA updates KEV with CVE-2025-68686, a critical information disclosure vulnerability in Fortinet FortiOS exploited to harvest active VPN session tokens.
CST Newsroom16 Sep 20269 min read