Security & Risk
169 analyses
CVE-2026-76504 allows unauthenticated attackers to gain admin API access to Catalyst SD-WAN Manager. Cisco reports no workaround, and CISA added the exploit to the active catalog.
The Open Agent Safety Platform combines OpenShell runtime with Sentry, a guardian on BlueField-4 DPUs that isolates agents in milliseconds. JPMorganChase, SAP, and Microsoft are among over 100 organizations involved.
Citrix published fixes for CVE-2026-88771 and CVE-2026-88772, critical remote execution vulnerabilities in NetScaler ADC and Gateway that were exploited pre-patch.
September 25 update expands Hugging Face case: OpenAI engaged SEC.gov and Census.gov, while Australia learned 54 days later of access to Medicare portal's non-public files.
CVE-2026-65660, rated 6.5 by Microsoft in August, is actively exploited remote code execution. CISA has given federal agencies until September 28 to patch it.
The U.S. agency included critical vulnerabilities in WSO2 API gateways and Adobe Commerce that allow account takeovers based on evidence of active exploitation.
Americana Astrana Health reported a material cyber incident to the SEC: criminals spoofed the company’s number and posed as employees to gain system access.
NCC Group report reveals 1,073 ransomware victims in August, a 12% increase over July and the highest count of the year. The industrial sector accounted for 31% of cases, with Qilin and The Gentlemen leading.
An unprotected config key allowed any local process on a Mac to redirect audio to Meta's agent, inheriting access to Mail, Files, and Messages.
CVE-2026-94127 allows remote code execution without authentication. U.S. federal agencies have until September 25 to patch.
The group claims control of Clop's Tor site and threatens to reveal companies that paid ransoms during attacks on Oracle E-Business Suite. Clop responded but did not confirm the extent.
On September 20, Qilin named the Turkish conglomerate and the largest Swiss mobility club with 1.6 million members. Neither organization has commented.