Stay informed about the latest cybersecurity threats, vulnerabilities, malware campaigns, phishing trends, supply-chain attacks, and security advisories. This section provides timely updates and practical insights to help organizations understand emerging risks and strengthen their security posture.
CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog on September 9, 2026, covering Cisco Secure Firewall Management Center, Citrix NetScaler, Google Chromium V8 and multiple…
The disclosure of CVE-2025-20701 affecting Skullcandy Dime 3 wireless earbuds demonstrates how something as ordinary as Bluetooth pairing can become a meaningful security boundary when implemented inc…
AdaptHealth has confirmed that its 2026 cyberattack affected 4,115,802 individuals, placing the incident among the larger healthcare data breaches disclosed this year. The company, which provides home…
cPanel has patched CVE-2026-67401, a serious vulnerability in the EmailTrack functionality of cPanel & WHM that allows an authenticated hosting account with mail-related privileges to create arbit…
The disclosure of a new Microsoft Defender zero-day dubbed ShieldCrash highlights an uncomfortable problem in vulnerability remediation: fixing the specific exploit demonstrated by a researcher does n…
Veradigm has disclosed a patient-data breach after an attacker obtained credentials from the environment of one of its third-party vendors and used those credentials to access a Veradigm API reserved …
Cisco Talos has disclosed active exploitation of two vulnerabilities in Cisco Secure Firewall Management Center, CVE-2026-20079 and CVE-2026-20316, with observed attacks linked to both advanced threat…
CISA’s September 8, 2026 update to the Known Exploited Vulnerabilities Catalog adds four vulnerabilities affecting Adobe Commerce and Magento, Microsoft Windows and N-able N-central. The newly a…
Microsoft's September 2026 Patch Tuesday is extraordinary in scale, with fixes for at least 974 security vulnerabilities across Windows and other Microsoft software. That makes it the company&rs…
CVE-2026-50093 is a critical vulnerability affecting Siemens Siveillance Control and Siveillance Control Pro that can allow an attacker to upload arbitrary files through the OIS web module and potenti…
Adobe has released an emergency security fix for CVE-2026-75650, the maximum-severity Magento and Adobe Commerce zero-day known as StyleSmuggler, after confirming that attackers are exploiting the vul…
SAP’s September 2026 Security Patch Day includes a maximum-severity vulnerability in the SAP Kernel tracked as CVE-2026-44756 and dubbed OVERPASS by Onapsis. The flaw carries a CVSS score of 10.…
The emergence of Slim Spider, a previously undocumented financially motivated threat actor targeting Brazilian financial institutions, highlights an important shift in cybercrime: attackers are increa…
ShinyHunters claims to have breached Florida’s Driver and Vehicle Information Database, known as DAVID, and stolen more than 200,000 driver records after abusing a password-reset flaw to comprom…
Bimbo Bakeries USA has confirmed that employee information was stolen after attackers exploited a zero-day vulnerability affecting Oracle E-Business Suite, adding the company to the broader wave of or…
The disclosure of PEEP highlights an increasingly important shift in post-exploitation tradecraft: attackers are no longer satisfied with stealing browser data and moving on. They are beginning to tur…
ConnectWise has warned customers about a newly identified security issue affecting file-transfer behavior in ScreenConnect Remote Access Support and Access sessions. The vulnerability affects both clo…
JSCeal is a useful example of how modern credential-stealing malware is moving beyond passwords and targeting the authenticated browser session itself. The malware has been associated with malvertisin…
N-able has released an emergency hotfix for CVE-2026-86218, a critical pre-authentication remote code execution vulnerability in its N-central remote monitoring and management platform. The flaw carri…
Weverse has disclosed a data leak affecting 422,584 user accounts after Korea’s Internet & Security Agency, KISA, notified the company on September 3, 2026 that an external researcher had re…