Security & Risk
169 analyses
The largest Patch Tuesday in Microsoft history arrives with vulnerabilities already exploited in attacks on Windows ALPC and the Windows Update Stack, both elevating privileges to SYSTEM.
StyleSmuggler was added to CISA's KEV catalog on September 8. It is an unauthenticated RCE, CVSS 10, in the Magento template engine, with a Rust backdoor disguised as an NTP server.
APSB26-146 addresses CVE-2026-75650 exploited since September 4 in fully updated Magento stores. Sansec identified the unauthenticated remote execution route.
CERT Polska coordinated the disclosure of six vulnerabilities in RouterOS; the combination of two of them allows remote root control via SSH without credentials and is already being exploited.
Trezor confirms that ShipMonk retained orders it claimed to have deleted; a flaw in Metabase (CVE-2026-72898) opened an additional 67,000 records, bringing the total to over 80,000.
High-severity vulnerability in the JavaScript V8 engine, identified as CVE-2026-85046, was actively exploited before Google released the patch in the stable channel on September 3.
Program launched on September 3 subsidizes access to cybersecurity models for operators without enterprise budgets, starting in the U.S. with a focus on water,energy, and local governments.
Three of the four largest chatbots in the world experienced outages on Thursday morning within the same timeframe due to sharing the same Microsoft region. Gemini on Google Cloud remained operational.
OpenAI announced on Tuesday (2) that Astra is the company’s first model to achieve 'Critical' status under its Preparedness Framework. 100% on ExploitBench and two zero-days discovered independently triggered access gating.
Advisory cisco-sa-n9k-s1-rce-EH8dEtr, published on September 2, affects switches N9K-C9804, N9K-C9808, and eight other references. Data center fabric needs to apply a patch or close the port.
A report by Palo Alto Networks published on September 2 describes an invasion in which tactical execution was delegated to autonomous agents, including an 80-page report left for the victim.
Annual revenue closes at $11.5 billion with a 24% increase, RPO surpasses $20 billion for the first time, and Console is acquired to bring autonomous agents to Cortex.