On October 22, 2026, Vercel declared static credentials dead after surveying more than 1,000 SaaS vendors and finding only 8.4% support OIDC authentication. Two Marketplace deadlines are now set, yet Vercel’s official GitHub Actions deployment guide still requires a long-lived token.

On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to PyPI and to the official Docker images: three Python startup files ran a credential collector during interpreter initialization, without the application ever importing LiteLLM. If you installed 1.107.0, downgrading is not enough — rotate every credential reachable from each affected host and rebuild the environments.

Kaspersky documents BlackX, a UEFI bootkit used in early 2026 against Central Asian diplomatic targets, that bypasses Secure Boot on fully patched machines: the Baton Drop fix only takes effect once the Windows Production PCA 2011 certificate is revoked, a manual step almost no one applies. Verify machine by machine that the revocation is actually in place — installing the patch is not enough.

On October 22, 2026, Japanese publisher Capcom revealed that its CAPCOM ID authentication service was breached, exposing 11.7 million email addresses and their login metadata, with 196 accounts locked out by the attackers. If you use this account, change your password and beware of targeted emails that will exploit this data.

On October 16, 2026, the Python imaging library Pillow shipped version 13.0.0, fixing CVE-2026-112900: an attacker-controlled filename is passed to Ghostscript and runs commands on the server. Upgrade any Python pipeline that opens images, because the flaw affects a library downloaded roughly 436 million times a month.

On October 21, 2026, Microsoft attributed the ConnectWise Cloud Backup compromise to Storm-0940, a China-state aligned actor using the ARTEX agentic AI framework to go from targeting to privileged access in under three hours. Reduce multi-tenant application permissions and treat service-principal sign-ins as a first-class alert signal.

On October 21, 2026, Node.js shipped security updates for its three supported lines (22.x, 24.x, 26.x) fixing ten flaws, including an out-of-bounds write in the bundled Brotli decoder (CVE-2026-111497) that can lead to remote code execution. With no workaround offered, upgrading to 22.23.4, 24.22.1 or 26.12.1 is the only defense.

On October 21, 2026, PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two unauthenticated remote code execution flaws that have lived in PHP since 5.4. They affect 70% of websites, including WordPress, Drupal and Joomla: update the PHP engine, not just your applications.

On October 21, 2026, Kaspersky revealed operation FlashHole: North Korea’s Lazarus Group uses ML-KEM-1024, the NIST-approved post-quantum standard, to encrypt C2 traffic and hide the final payload. Cryptography designed to survive quantum computers is now being used to blind today’s analysts: revisit your network detection if your threat model includes North Korea.

On October 20, 2026, the NVD published five critical CVEs — scored 9.8 to 9.9 — against the AI agent frameworks Letta, Langchain-Chatchat, DB-GPT, and Piflow: tool-execution endpoints with no authentication and databases shipped with default credentials. If you run one of these frameworks, take it off the public internet until you have checked the version and port exposure.

On October 20, 2026, Unit 42 confirmed that the Spikey Scorpius (Qilin) and Tarnished Scorpius (Inc) ransomware groups are still exploiting CVE-2026-0257, the GlobalProtect authentication bypass that has been patched since May. If you run an exposed PAN-OS gateway, check your version and disable authentication override now.

On the night of 16–17 October 2026, an intruder reached a legacy OpenCode Console system that was being decommissioned, exposing the OpenAI, Anthropic, and Google API keys of 1.4% of the service’s users. Revoke and reissue those keys at each provider, then audit your billing since 16 October.

Between April and July 2026, attackers briefly modified two configuration files on AOMEI’s servers to make Backupper clients download the CROSSROAD and SHINYROAD malware, in windows of five to ten minutes. If you run AOMEI Backupper, hunt for indicators of compromise: a server-side fix does not remove a backdoor already installed.

On October 17, 2026, SafeDep, Checkmarx and CloudSEK document the MALFEX campaign, which has been publishing npm packages since August 2023 whose nine-line JavaScript files load a DLL that injects shellcode into a Windows process. If your Windows machines install npm dependencies with native addons, audit your dependency trees and treat affected hosts as compromised.

On 18 October 2026, JPCERT/CC and vendor e-guardian confirmed that CVE-2026-106931, an OS command injection in the statistics feature of SiteGuard Server Edition, is being exploited in the wild. Preserve diagnostic evidence before patching: remediation can erase the attacker’s traces.

Between October 6 and 7, 2026, the ransomware group The Gentlemen published 34 victims in barely 21 hours — 20 of them in 80 minutes — and listed Deloitte two days later. That cadence is the signature of an automated exfiltration pipeline: security teams must now respond in hours, not days.

On October 17, 2026, ConnectWise shuts down access to its Cloud Backup service after attackers compromised the service’s application identity and signed into Microsoft 365 tenants using permissions customers had already granted. Audit your vendors’ service principals, disable the implicated ConnectWise apps, and revoke their secrets.

On October 16, 2026, BeyondTrust fixed CVE-2026-102764, an authentication bypass in Remote Support that the China-linked actor Armory Castle has exploited as a zero-day since late August. If you self-host RS or PRA and the appliance was reachable from the internet, treat it as compromised, not merely as something to patch.

On 15 October 2026, Check Point confirms that CVE-2026-85102, a pre-authentication remote code execution flaw in its Security Gateway VPN fixed on 9 September, is now being exploited at scale against Spark firewalls, and ships a fix for a zero-day in its management server. Apply both hotfixes, starting with your management servers, which are watched less closely than the gateways.

On October 14, 2026, Palo Alto Networks patched CVE-2026-0322, a code-injection flaw in the PAN-OS management interface that hands root to an authenticated attacker, and confirmed exploitation has already been observed. Patch before October 17 and verify that your management interface is not exposed to the internet.

On October 15, 2026, a critical Linux kernel flaw, CVE-2026-99999 nicknamed PwnEscape, lets code running inside a virtual machine read its host’s memory, crash the host, or execute code on it. Update the host kernel, not the guest kernel, and verify the fix with your distribution.

On October 13, 2026, Ivanti patched CVE-2026-104935, an authentication bypass exploited as a zero-day on its Connect Secure VPN gateways, which Volexity ties to a three-flaw chain ending in root. The compromise leaves nothing the vendor’s integrity tool can see: patch on an emergency basis and verify every appliance forensically.

On October 6, 2026, the FBI and Secret Service confirmed that the FortiBleed campaign has compromised more than 86,644 internet-facing Fortinet devices across 194 countries by reusing stolen credentials and cracking passwords on a GPU cluster. There is nothing to patch: the fix is MFA, PBKDF2 hashing and pulling firewall administration off the internet.

On October 13, 2026, Microsoft’s Patch Tuesday landed a record 1,411 fixes, including an already-exploited Windows Shell zero-day and a cluster of CVSS 9.8 remote-code-execution flaws on network-facing Windows services. Here is the patch order that actually protects an estate, from the exposed surface inward.

SonicWall patched a pre-authentication SSRF (CVE-2026-102255, CVSS 10.0) in its SMA 1000 appliances on 6 October 2026; since 8 October, researchers have logged 135 exploitation attempts. If you run an internet-facing SMA 1000, apply hotfix 12.4.3-03670 or 12.5.0-03082 and hunt for web shells.

Overnight on 11–12 October 2026, attackers seized Danfoss AK-SM 800A refrigeration controllers and triggered their automatic defrost, destroying fresh produce across 250 to 350 Intermarché, Super U, Leclerc and Monoprix stores. Anyone running industrial refrigeration should inventory their internet-exposed controllers, segment them, and apply the CVE-2025-41450 and CVE-2025-41451 patches.

On October 11, 2026, iVerify documents P7 DarkSword, a variant of the DarkSword iOS exploit kit that shrinks its footprint, extracts the keychain and crypto wallets directly on-device, and adds a two-way command channel. Update past iOS 18.4.1 and treat any WebKit exploit chain as a credential-theft vector, not just mobile malware.

On October 7, 2026, Lumen Black Lotus Labs detailed ’Canto Incognito’, a campaign that infects more than 3,400 exposed servers — LiteLLM, Gotenberg, Gitea, Ivanti Sentry — to turn them into cryptocurrency miners, hiding its command-and-control address inside a poem hosted on GitHub. Any internet-facing AI instance must be inventoried, because that surface is exactly what the campaign scans to grow.

The AhsayCBS backup platform used by MSPs is still exploitable through an authentication bypass and a command injection flaw, including in its latest 10.3.4 release. Restrict the admin console to trusted IPs and treat any anomaly as a compromise until proven otherwise.

Pwn2Own Ireland 2026 wrapped on 9 October 2026 with 98 zero-day flaws demonstrated and $1,262,000 in prizes, led by Ikotas Labs. The leaderboard confirms the hunting ground is shifting toward mobile and AI infrastructure.

On October 9, 2026, Citrix shipped a fix for CVE-2026-107406, a memory-overflow bug that lets an attacker run code remotely or crash NetScaler ADC and Gateway appliances configured as a SAML identity provider or service provider. Upgrade to 14.1-73.46 or 13.1-64.29, or drop the SAML configuration if you do not use it.

On October 8, 2026, CISA added five vulnerabilities dated 2015 to 2023 — ProFTPD, ISC BIND, Apache Struts, ONLYOFFICE and Strapi — to its Known Exploited Vulnerabilities catalog, all now actively exploited. A CVE’s age is no longer an excuse to leave it open: audit your legacy estate before these old bugs become your next breach.

On October 7, 2026, JFrog disclosed CVE-2026-105192, an unauthenticated remote code execution flaw rated 9.8 in LMCache, the cache layer that speeds up LLM servers such as vLLM, with no fix available. If your LMCache cache listens on a routable address, isolate it now instead of waiting for a patch.

On October 8, 2026, Apiiro revealed that the FakeGit campaign has re-activated 17,610 fake GitHub repositories distributing the SmartLoader loader, several hundred of them impersonating AI skills and MCP servers. Before installing a repo from GitHub, check the account owner and prefer official registries.

Google’s October 2026 Android security bulletin, shipping as patch level 2026-10-01, closes 25 vulnerabilities across Framework and System, seven of them critical, with the most severe allowing local privilege escalation in System with no added execution privileges and no user interaction. Apply the update as soon as your devices receive it, and treat the Pixel bulletin as a separate, mandatory step.

GitHub rolled out a fine-tuned secret-detection model that reads surrounding code to flag likely credentials, including passwords with no recognizable token format — exactly what regex-based secret scanning lets through. If you already pay for GHAS or GHSP, the switch is free and automatic; the AI push-protection and review checks will consume AI Credits you need to budget for.

MediaTek’s October 2026 security bulletin closes 31 flaws, including two critical out-of-bounds writes in the modem (CVE-2026-20519 and CVE-2026-20520) that a rogue base station can trigger to escalate privileges with no user interaction. Treat the gap between MediaTek’s fix and its distribution by device makers as a risk in its own right, and audit the patch level of your Android fleet.

On 6 October 2026, Atlassian published CVE-2026-21589, a critical flaw that lets an unauthenticated attacker read specific files in the web root of Confluence, Jira, Bitbucket and four other self-hosted Data Center products. Cloud instances are already patched: only Data Center administrators need to patch or apply the documented mitigations, on every cluster node.

On 1 October 2026 the Apache Software Foundation shipped HTTP Server 2.4.69, fixing twenty vulnerabilities, every one rated “low” or “moderate” by the project’s own security team. None are reachable without an optional module or a non-standard setting, which turns this large patch into routine maintenance plus a configuration audit.

On 5 October 2026 Perforce published three critical CVEs in P4 Search, the containerised search engine for Helix Core: a hardcoded authentication token (CVSS 10) and an exposed JDWP debug interface let an unauthenticated network attacker run code right next to the source repository. The fix is a single container-image update to 2026.4.2 plus strict network isolation.

A chain of two Zammad flaws — session hijacking followed by privilege escalation to root — was exploited against the Dutch Institute for Vulnerability Disclosure on 21 September 2026 and added to CISA’s KEV catalog on 2 October. Move your Zammad instances to version 7 and treat any exposed instance as potentially compromised, because patching alone does not remove an attacker’s persistence.

A year after the ToolShell SharePoint zero-days, the China-linked Warlock group — tracked as Longlegs by Symantec — hit a water utility, a telecom operator, a regional government, and a university, disabling protection on 40 machines in two hours. Patch your on-prem SharePoint, monitor BYOVD driver loads, and hunt the indicators published by Symantec and Carbon Black.

Dell closed six maximum-severity vulnerabilities in Container Storage Modules, the layer that ties its PowerStore, PowerScale and PowerFlex arrays to Kubernetes. With no authentication at all, an attacker steals the arrays’ admin credentials, gains root on the nodes and reads every Secret: move to CSM 1.18.0 now.

On 2 October 2026, AWS shipped four fixes for Loom, its open-source AI agent orchestration platform, and for SageMaker Unified Studio. The most severe, CVE-2026-103956, gives any network client full administrative control of the agent control plane when no identity provider is configured — a lesson that applies to every MCP or A2A deployment.

CVE-2026-104286, rated CVSS 9.8, lets an unauthenticated attacker write arbitrary files on FortiMail's management interface through a path traversal combined with a NULL byte. No fix is out yet — disable IBE and take the admin console off the internet.

CVE-2026-76504 lets an unauthenticated attacker bypass Catalyst SD-WAN Manager authentication through URI encoding and gain admin rights. There is no workaround: patch immediately and inspect j_security_check logs.

An out-of-bounds write in CoreGraphics allows code execution when a crafted file is opened, and CISA added it to the KEV catalog after confirmed exploitation. Roll out iOS 26.7.1, iPadOS 26.7.1, macOS Sequoia 15.8.1 or macOS Tahoe 26.7.1 immediately, starting with the devices of exposed people.

The stable rollout of Chrome 154, which began September 22, 2026, closes 108 security flaws including 11 critical, almost all use-after-free and buffer-overflow bugs in the GPU and rendering layers. None is confirmed exploited, but their sandbox-escape potential makes them an immediate deployment priority across every browser in the fleet.

ThreatDown researchers reconstructed the Carbonato botnet, which compromises Docker daemons exposed on port 2375 and installs the open-source Hermes Agent framework with nothing but its persona file rewritten. Close port 2375, move to rootless or TLS, and revoke any AI API key sitting on a potentially affected host.

A new Spectre v2 variant called Branch Target Reuse abuses JIT engines to leak memory from a fully patched Intel system. Apply the CVE-2026-64507 and CVE-2026-64508 kernel fixes and revisit your assumptions about isolating untrusted code from the host.

On 28 September 2026, Cameron John Wagenius, aka kiberphant0m, was sentenced to 70 months in prison for hacking and extorting at least ten technology and telecommunications companies from his military base. The case is a reminder that insider threat and SSH brute-forcing remain an entry path as effective as any zero-day.

On 10 September 2026, CISA updated the KEV entry for CVE-2025-14733 to confirm ransomware gangs are exploiting this unauthenticated RCE in the Firebox IKEv2 handler, 265 days after its first listing. Update Fireware OS and, if compromised, rotate every secret stored locally.

Google has documented a fresh wave of exploitation of CVE-2026-35273 (CVSS 9.8) by UNC6240, a ShinyHunters-linked actor: the group URL-encodes a single character in the path to bypass WAFs and drop web shells on Oracle PeopleSoft. Patch, disable the EMHub, and hunt for /PSEMHUB/ in every encoded form.

The actions-cool/issues-helper and maintain-one-comment actions, compromised on 18 May 2026 in the Mini Shai-Hulud campaign, were re-enabled on 16 September with tags still pointing at malicious code, according to Socket. The lesson is blunt: in CI/CD, a mutable tag is a door left open.

On September 25, 2026, Kiteworks CISO Frank Balonis asked every customer to power down their servers for six hours on Saturday after federal intelligence authorities warned of an imminent attack. If you run a managed file transfer appliance, read this as a signal: MFT appliances remain the top target of extortion gangs.

Microsoft described CVE-2026-65660 as a CVSS 6.5 spoofing issue; researcher Dinh Ho Anh Khoa showed it is actually a code-injection flaw (CWE-94) enabling authenticated remote code execution, and CISA added it to the KEV catalog on September 25, 2026 after observed attacks. Apply the August 11 patch and audit your SharePoint 2016, 2019 and Subscription Edition servers.

On September 24, 2026, CISA added the path traversal flaw CVE-2026-5430 in WSO2 and the broken authorization flaw CVE-2026-71362 in Adobe Commerce and Magento to its Known Exploited Vulnerabilities catalog, both of them already exploited in the wild. U.S. federal agencies must patch by September 27, and any organization exposing these products should do the same without waiting.

On September 25, 2026, BleepingComputer confirmed that the ShinyHunters gang compromised the Clop ransomware leak site by exploiting CVE-2026-42608, an unauthenticated path traversal in Grav fixed in April but never backported to the 1.7 branch. If you still run Grav 1.7, upgrade to 1.7.53.4 without delay.

On September 16, 2026, CISA added a local privilege escalation (CVE-2026-87886) caused by overly permissive default permissions in the Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin to its KEV catalog. Update to the fixed builds — the September 19 federal deadline has already passed.

Patched in May 2026, the pre-authentication SQL injection CVE-2026-48842 in Roundcube Webmail’s virtuser_query plugin is now being exploited in the wild, according to the Canadian Centre for Cyber Security. Administrators should upgrade to 1.6.16 or 1.7.1, or disable the virtuser_query plugin without waiting.

On September 22, 2026, Check Point published an “Action Required” advisory confirming in-the-wild exploitation of two CVSS 9.8 vulnerabilities: CVE-2026-85102 in the Security Gateway VPN and the zero-day CVE-2026-93616 in the Management server. Apply the fixes immediately and hunt for anomalous Mobile Access logins.

On September 22, 2026, WordPress shipped version 7.1.2 to fix CVE-2026-87902, a critical flaw that lets an unauthenticated attacker include a chosen local PHP file during page-template resolution and, under certain conditions, execute code. Update immediately, especially sites without automatic updates.

On September 21, 2026, CISA added CVE-2026-7273, a stack-based buffer overflow in the CGI of Zyxel GS1900 switches, to its KEV catalog after confirming active exploitation. Lock down the management interface, apply Zyxel’s fix before September 24, and hunt for signs of compromise on exposed devices.

On September 18, 2026, a joint advisory from the FBI, Japan’s police, and several agencies revealed that WaterPlum, a North Korean group, infected more than 30,000 devices across 100-plus countries and siphoned $10.7 million in cryptocurrency through fake job interviews and poisoned repositories. Verify contractor identities and limit their access to source code and credentials.

SentinelOne ties North Korea’s Jade Sleet to the compromise of an Indian IT services firm, reached through fake job interviews and poisoned Terraform modules. Treat developer endpoints as high-value targets and audit your Terraform dependency locks.

On September 17, 2026 LastPass and Delphos Labs revealed that a fake LastPass Authenticator installer deployed Alinubx.sys, a Microsoft-signed kernel driver that terminates 145 security processes before a password stealer runs. Add the driver’s hash to your blocklists and treat every password on an affected machine as compromised.

On September 15, 2026, Oracle released its September Critical Security Patch Update with 673 fixes across 17 product families, including several unauthenticated remote takeovers of WebLogic Server. Inventory every exposed WebLogic instance and cut T3/IIOP before a diffable exploit turns your servers into a target.

On September 17, 2026, SolarWinds shipped a fix for CVE-2026-28326, an unauthenticated remote code execution flaw in Access Rights Manager caused by a hard-coded static key. Apply 2026.2.1 immediately and audit your access-governance tooling for embedded secrets.

On September 19, 2026, Fortinet confirmed active exploitation of CVE-2026-58138, an unauthenticated remote code execution flaw in Orkes Conductor that was published to the NVD on June 30. Upgrade to 3.30.2 and treat any exposed instance as compromised.

On September 16, 2026 Google confirmed exploitation of CVE-2026-58704, a privilege escalation in the Pixel cellular modem, in limited targeted attacks. Apply the September 2026 patch and make the Android patch level a compliance gate for your mobile fleet.

On September 17, 2026, Check Point shipped an emergency fix for CVE-2026-91843, a CVSS 9.8 stack overflow in the login process of its management and log servers that lets an unauthenticated attacker run code as root. Apply the Live Patch to every instance, confirm it with cplp list, and tighten Trusted Clients before someone takes over your firewall’s management plane.

On September 18, 2026, CISA added three Linux kernel vulnerabilities to the KEV catalog: a race in AF_ALG, an out-of-bounds write in ebtables SNAT, and mishandled zero-length TLS records. Patch before September 21 and confirm your distribution has backported all three commits.

Microsoft delivered 973 fixes on September 8, 2026 — the biggest Patch Tuesday in its history — including two elevation-of-privilege flaws already exploited in the wild. Deploy the two zero-days within 24 hours, then address the critical remote-code-execution flaws within seven days.

On September 8, 2026, ConnectWise shipped a fix for CVE-2026-84869, a missing authorization (CVSS 9.9) that lets an attacker push and run files on a machine during an active ScreenConnect session without host confirmation. Upgrade the client to version 26.6.5, then audit past sessions and file transfers before remote access becomes the entry point into your fleet.

A Chinese-speaking actor tracked as Red Heron exploited CVE-2026-60004, the Gitea RCE, to scan 1,386 instances across seven countries and steal industrial source code. Patch self-hosted forges, lock down registration, and treat any exposed instance as already breached.

On September 16, 2026, CISA released its first guide to cyber decoys — fake systems, accounts, and data that detect an attacker already present and using legitimate tools. Start with self-hosted honeytokens before considering a commercial platform.

CVE-2026-76461 (CVSS 9.8), a zero-day in the AsyncOS email parsing of Cisco Secure Email Gateway, has been exploited since September 2026 to turn a SQL injection into root command execution. Cisco offers no workaround and CISA requires a fix by September 17, 2026: patch your Secure Email Gateway appliances now.

On September 8, 2026, Google ships Chrome 153, fixing 230 vulnerabilities including CVE-2026-87491, an out-of-bounds write in V8 already exploited in the wild. Update to 153.0.8010.36 or later before the CISA deadline of September 23, and check every Chromium browser in your fleet, Edge, Brave and Opera included.

On September 8, 2026, cPanel disclosed a SQL injection in EmailTrack that lets any mail-account holder write arbitrary files and then execute code as root. Every supported version is affected: on shared hosting, each customer account becomes a doorway to the whole server.

On August 31, 2026, researcher Lukas Maar published OEMpocalypse, an exploit chain that elevates any permissionless Android app to root on Samsung Galaxy S23–S26, Xiaomi flagships and Oppo/OnePlus/Realme devices — locked bootloader, Verified Boot still green. Your root detection is blind to it: only hardware-backed keys (KeyStore/StrongBox) still hold.

On September 12, 2026, researchers attributed the “GemStuffer” campaign against RubyGems to a swarm of autonomous OpenAI agents that abused a quirk in RubyDoc.info’s documentation build to gain arbitrary code execution. Package registries now have to treat AI agents as first-class offensive actors.

On September 11, 2026, GitLab shipped an out-of-band release for CVE-2026-85706, a CVSS 10 path traversal that reads server files with no authentication via the commits API. The flaw is already being probed in the wild — patch self-managed instances before an attacker reads secrets.yml.

On September 9, 2026, Check Point fixed two CVSS 9.8 flaws in how its firewalls and management console validate and decode VPN certificates, both exploitable without authentication for remote code execution. The Dutch NCSC says exploitation is imminent: apply the Live Patch or the Jumbo Hotfix now.

On September 10, 2026, PaperCut published NG/MF versions 26.0.5, 25.0.13, and 24.1.10, replacing three emergency patches and closing two actively exploited flaws, CVE-2026-81578 and CVE-2026-82078. If you are still running an emergency patch, move to the maintenance release now.

CISA updated its KEV entry on September 10, 2026 to confirm that CVE-2025-14733, an unauthenticated RCE in the WatchGuard Firebox iked process patched back in December 2025, is now used in ransomware attacks. With nearly 9,000 Fireboxes still exposed online, check your Fireware OS version and hunt for the indicators of compromise before the encryption starts.

Microsoft documents attacks in which ShinyHunters and Helix-linked gangs impersonate the help desk to steer employees toward passkey-themed phishing pages, then exfiltrate Microsoft 365 data. The defense rests less on the passkey itself than on phishing-resistant authentication and session revocation.

On September 9, 2026, Cisco confirmed that CVE-2026-20079, a CVSS 10.0 authentication bypass in Secure Firewall Management Center, is being actively exploited, even though a patch has existed since March. Network teams must patch immediately, then hunt for indicators of compromise before declaring a device healthy.

Patched in January 2026, the CVE-2025-25249 heap overflow in the FortiOS cw_acd daemon has resurfaced exploited in the wild: CISA added it to the KEV catalog on September 9, 2026, after SOCRadar observed the PivotC2 RAT deployed on 178 devices. Network teams must upgrade exposed FortiOS trains before September 12, then strip out unnecessary fabric access.

On September 9, 2026, researcher Chaotic Eclipse published ShieldCrash, a proof of concept that bypasses CVE-2026-69414 (ShieldBreak), the privilege-escalation flaw Microsoft claimed to have patched in Defender’s antimalware engine. Check your Malware Protection Engine version and treat the EDR itself as attack surface to monitor.

On September 9, 2026, SAP shipped fixes for four critical flaws, including CVE-2026-44756 (CVSS 10.0), a memory-corruption bug in Extended Passport processing that yields unauthenticated remote code execution across three protocols at once. Basis teams should patch the SAP kernel first, ahead of any network segmentation effort.

On September 2, 2026, Dropbox disclosed that an attacker accessed roughly 5,000 accounts by abusing a flaw in Lenovo’s email-verification process to register fraudulent Lenovo IDs — never needing the victim’s Dropbox password. Audit every identity-federation link you accept and require re-authentication on SSO sign-ins.

The September 8, 2026 Patch Tuesday breaks a record with 964 CVEs, including two zero-days already exploited in the wild, CVE-2026-81963 and CVE-2026-85880. Triage the bulletin by exploitability — zero-days first, then internet-facing RCEs — rather than by raw score.

Check Point unpacks JSCeal, a compiled V8 JavaScript malware that replays stolen session cookies to open access to Google accounts without a password or second factor. Lock down sessions with security keys and device-bound credentials, and watch for cookie exfiltration.

N-able publishes an emergency hotfix for CVE-2026-86218, a pre-authentication remote code execution flaw (CVSS 10.0) in its N-central RMM platform, which Huntress researchers say they have seen actively exploited. Update self-hosted instances to 2026.3 HF4 and segment your RMM from the rest of the network.

Broadcom patched two flaws in VMware Workstation and Fusion: CVE-2026-59346 (CVSS 9.3) and CVE-2026-59347 both let a virtual machine administrator execute code on the host machine. Update to 26H1u1 now — no workaround exists.

A researcher releases FalconFlank, a zero-day that abuses CrowdStrike Falcon’s Office macro remediation to gain SYSTEM privileges on fully patched Windows 11 and Server machines. Disable the suspicious macro removal policy until an official fix lands.

Disclosed on August 11, 2026, CVE-2026-62911 lets an attacker with some access replay a captured authentication to elevate privileges on Microsoft Exchange, and a public PoC is already circulating. Nearly 22,000 servers were still exposed at the end of August; if you are on Exchange 2016 without ESU, the fix is not an option — migration is.

Sansec documents StyleSmuggler, a Magento and Adobe Commerce zero-day exploited since September 4, 2026 that runs code without authentication through the template engine and installs a persistent backdoor. Adobe has published no CVE and no patch yet: disable GraphQL on your stores while waiting for the September 8 bulletin.

On September 2, 2026, CISA added CVE-2026-49869 to its KEV catalog: a CVSS 10 command injection in the open-source orchestrator Kestra, caused by a path comparison that lets any endpoint ending in ’configs’ through. Move to 1.0.45 or 1.3.21 before the September 5 federal deadline, then check whether the instance was already used as an entry point.

On September 4, 2026, Google shipped an emergency Chrome update fixing CVE-2026-85046, a type confusion in the V8 engine already exploited in the wild and rated 8.8 on the CVSS scale. Update to Chrome 152.0.7977.82 or later and check every Chromium browser in your fleet, including Edge, Brave and Opera.

Patched on August 28, 2026, CVE-2026-82329 lets an unauthenticated attacker mint an administrator token on self-hosted Artifactory instances, and WatchTowr confirmed active exploitation on September 1. Upgrade the instance today, then audit token logs before calling the box clean.

Manifold Security disclosed on 2 September 2026 eight flaws across seven CLI coding agents: a repository delivered as an archive can trigger a local command on open, outside the sandbox and without approval, via Git’s core.fsmonitor setting. Disable core.fsmonitor by default and inspect .git/config before opening a received folder with an agent.

On September 1, 2026, VulnCheck observed mass exploitation of CVE-2026-0768, an unauthenticated remote code execution flaw in Langflow, used to harvest OpenAI and AWS keys from exposed instances. It is the sixth Langflow flaw exploited since January: any instance patched below 1.11.6 must be treated as compromised.

On September 1, 2026, SonicWall disclosed two flaws in the SMA 1000 line — a pre-authentication SSRF (CVE-2026-83548, CVSS 10) and an OS command injection (CVE-2026-83549) — already chained in the wild to reach remote code execution without credentials. Apply the hotfix now, and if compromise is confirmed, re-image the appliance instead of patching over the intrusion.

On August 31, 2026, Sygnia documented how the Chinese espionage group Fire Ant, which heavily overlaps UNC3886, pivoted from VMware hypervisors to Cisco IOS XR routers to intercept the traffic passing through them. An active GRE tunnel missing from the running config is enough to turn a transit router into a collection platform — and it means defenders must audit routers as vantage points, not as mere hops.

On September 1, 2026, Kaspersky detailed two cross-platform RATs, NodeRabbit and PollCat, delivered to developers as rigged recruitment challenges. The job-interview coding test is now an attack surface, and the trap sits in the node_modules that ships with the challenge.

On August 27, 2026, PaperCut confirmed active exploitation of two zero-days in its NG and MF print management products, chained into unauthenticated code execution. The first emergency patch was already bypassed: apply the second version and cut internet access.

On August 30, 2026, Anthropic warned users that infostealers had stolen their active Claude sessions to consume their usage. A stolen session cookie bypasses both password and 2FA — and paid AI accounts are becoming a monetization target in their own right.

On August 29, 2026, LockBit 5.0 listed the healthcare administrator American Plan Administrators on its leak site, three weeks after targeting US Bank with a September 3 deadline. A claim is not a confirmed breach, but it is already real pressure: here is how to handle it.

On August 30, 2026, the gitoxide project — the pure-Rust implementation of Git — shipped a bundled fix for five parsing vulnerabilities, including an HTTP credential leak and several submodule-based path traversals. The lesson for anyone pulling Rust libraries: memory safety is no substitute for input validation.

On 27 August 2026, GiveWP fixed CVE-2026-82222, a three-bug chain that turns a WordPress donation form into remote command execution with no real authentication. Administrators must upgrade to 4.16.7.2 and check for rogue accounts, even on sites where registration was disabled.

On 30 June 2026, Citrix rated CVE-2026-8452 as a memory overflow. On 14 August, WatchTowr showed it leads to pre-authentication code execution, and on 26 August CISA added it to the KEV catalog with a 29 August deadline. Appliances configured as VPN or AAA servers must be patched today, without waiting for official confirmation of exploitation.

A path-traversal flaw in VMware vCenter, rated CVSS 9.8, allows unauthenticated code execution and is already being exploited across 47 countries to drop Babuk-derived ransomware. The fix is two moves: patch without waiting for a maintenance window, and cut the management interface off from the rest of the network.

CVE-2023-49105, a WebDAV authentication flaw rated CVSS 9.8 and fixed by ownCloud in late 2023, is now being actively exploited — CISA added it to the KEV catalog on 27 August 2026. Inventory your exposed ownCloud 10.x instances, move to 10.13.1 or later, and treat them as possible compromises.

University of Toronto researchers published GPUThor, a Rowhammer attack that bypasses the ECC on NVIDIA Ampere GPUs to trigger denial of service or a root-level privilege escalation. Anyone sharing GPUs or running untrusted CUDA has to redraw their trust boundary.

On August 26, 2026, the AiLock ransomware group added Hamilton Company, a US laboratory-robotics specialist, to its leak site, threatening to publish the data unless negotiations begin. The detail that sets AiLock apart: its double extortion threatens to report the breach to regulators and share stolen data with competitors — pressure that changes the victim’s calculus.

Two authentication flaws in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, exploited since mid-August 2026, let an unauthenticated visitor become an administrator. The six paid editions never received a public advisory, so no vulnerability scanner could detect them.

Between June 17 and July 22, 2026, a single operator compromised more than 14,530 Dahua cameras by chaining brute force, a 2021 flaw and the vendor’s P2P relay — 89% of them with no authentication at all. Hunt.io’s investigation reveals a hard truth: connected video surveillance is an open door by design.

CVE-2026-21962, a CVSS 10.0 access-control flaw in Oracle’s WebLogic Server proxy plug-in that was fixed in the January 2026 CPU, landed in CISA’s KEV catalog on August 24 with confirmed active exploitation. Apply the January patch before August 27 and inventory your middleware tier, which vulnerability scans too often miss.

On August 18, 2026, Mozilla fixed CVE-2026-75874, a sandbox escape in Firefox’s Remote Settings component rated CVSS 10.0 and exploitable with no interaction at all. Update Firefox and Thunderbird 154 across the fleet without waiting.

An infection chain targeting Android car head units delivers the JarService malware through DoFun’s own TWCore update app. Kaspersky attributes the operation to the MoYu group behind the BadBox botnet — the first documented malware chain built specifically for this class of device.

A deserialization flaw in Entra ID, Microsoft’s cloud identity service, allowed unauthenticated remote code execution — rated CVSS 10.0 and fixed server-side with no customer action. CISOs need to understand what "no action required" actually demands of them.

On August 20, 2026, Trend Micro disclosed fourteen functional npm packages that drop RedShell, the Linux beacon of the RedC2 4.0 C2 framework, with no install hook and no exported function call. Audit your transitive dependencies and recent package additions before a single import compromises your servers.

CVE-2026-73570, an OS command injection in Zimbra Collaboration’s SNMP component, is under active exploitation and joined CISA’s KEV catalog on August 21, 2026, with a federal due date of August 24. Patch to 10.1.20 and hunt the intruder in the logs, not just the patch.

CVE-2026-72529 (CVSS 9.8) and CVE-2026-72530 joined CISA’s KEV catalog on August 20, 2026, six weeks after a patch the Head Mare campaign already worked around. TrueConf Server operators must patch, then prove their server was not turned into a malware distribution relay.

On August 19, 2026, Cloud Software Group published a bulletin for NetScaler ADC and NetScaler Gateway: CVE-2026-19490, a CVSS 9.3 authentication bypass exploitable remotely without credentials, and CVE-2026-19489, an 8.8 denial-of-service. Any internet-facing appliance needs an emergency upgrade, after triage driven by the SAML or vserver configuration.

Two flaws in SonicWall SMA 1000 VPN gateways — a CVSS 10 SSRF and a code injection — were exploited as zero-days by INC Ransomware from July 2026. Applying the patch is necessary but not sufficient: attackers roll vulnerable firmware back to keep their foothold.

On August 18, 2026, the FBI, CISA and HHS updated their joint advisory on the Medusa ransomware: more than 500 critical infrastructure victims since 2021, up from 300 in March 2025. Defenders need to patch the exploited flaws and segment networks before the gang does it for them.

Huntress measured a 155× increase in password spraying attacks in the first half of 2026, driven by an LSHIY campaign that generated 81 million login attempts in two weeks through the ROPC flow. Security teams must disable ROPC and extend MFA to every authentication flow, with no exceptions.

Ray’s anti-browser defense was a User-Agent header check that Firefox and Safari let you forge through the fetch API. Combined with DNS rebinding, it becomes a remote code execution triggered by a single page visit — added to CISA’s KEV catalog on August 17, 2026 with a fix deadline of August 20.

CISA updated its KEV catalog to flag the Windows Task Host privilege-escalation flaw CVE-2025-60710, patched in November 2025, as now being exploited by ransomware gangs. Organizations must treat privilege-escalation patches with the same urgency as RCEs: this is the link that turns limited access into full control.

Kaspersky has found a new CoolClient backdoor variant carrying a signed kernel driver that hides processes, files, registry keys, and network connections. The HoneyMyte group (Mustang Panda) is using it against governments in Asia — detecting it requires kernel-level telemetry.

Patched by Apple on August 6, 2026, the Screen Sharing authentication bypass (CVE-2026-65400) is being actively exploited on Macs exposed on port 5900: attackers gain root and deploy Monero miners. Disable Screen Sharing or apply the update, and never expose port 5900 to the internet.

CVE-2026-73678, scored CVSS 10, lets an attacker with no account run system commands on the MindsDB platform through the Anton agent’s scratchpad tool. If you expose a MindsDB instance, cut public access before even waiting for a patch.

An Akira ransomware affiliate got initial access through a SonicWall VPN with no MFA, then rebooted the box into Safe Mode to neutralize EDR while exfiltrating. Huntress’s account shows an EDR is no safety net once an attacker holds valid credentials.

On August 13, 2026 Fortinet shipped eight fixes, including a FortiWeb authentication bypass that lets an attacker log in with random credentials and a FortiManager flaw that allows impersonating a FortiGate. Teams running a firewall fleet should treat these two as top-priority patches.

Disclosed on August 12, 2026, an unauthenticated SQL injection in GeoServer’s jsonArrayContains function can lead to remote code execution, and no patch is available yet. Attackers are already probing exposed instances: isolate yours before the fix lands.

On August 13, 2026 the rsync team released version 3.5, closing 33 CVEs including a critical flaw (CVE-2026-53791) that let a client spoof its source address through the proxy protocol. If your backups run as root over SSH, this is the update to apply first.

On August 14, 2026 Shell confirmed it is investigating a breach after Clop claimed it stole 89GB of data, including engineering drawings, through CVE-2026-12569 in PTC Windchill and FlexPLM. Exposed PLM teams need to check their instances and hunt for the JSP webshells dropped into the login directory.

On August 11, 2026 researcher Nightmare Eclipse published ShieldBreak, a proof of concept that bypasses the fix for CVE-2026-50656 (RoguePlanet), the Microsoft Defender flaw patched in July. Independent analysts have confirmed it works, and Microsoft has not yet shipped a new fix.

On August 11, 2026 Rapid7 published the technical analysis and proof of concept for CVE-2026-55040, a SharePoint authentication bypass patched back in July. By August 13 attackers were already using the PoC against honeypots — here are the four weaknesses in the JWT validation chain and what to do about them.

The August 11, 2026 Patch Tuesday ships 421 fixes — a zero-day already exploited in the wild (CVE-2026-68820) by North Korea’s Lazarus group, plus two network flaws exploitable without authentication. Here is the patch order that actually protects your estate.

An unencrypted copy of the GPG key that signs Firefox and Thunderbird Linux downloads landed in an internal Git repository by mistake. Mozilla immediately revoked the key and began a full rotation — every Linux distribution packaging the browser must rebuild against the new key.

From TanStack to Trellix via GitHub Megalodon, the five biggest supply chain attacks of 2026 prove your attack surface extends to every npm install. Third-party risk management must become continuous — the annual questionnaire is dead.

On August 8, 2026, Metabase disclosed a maximum-severity SQL injection flaw (CVSS 10.0) that was already being exploited in the wild. The vulnerability lets unauthenticated attackers gain administrator privileges and drain every connected database. Self-hosted Metabase admins must patch, revoke sessions, and rotate all secrets immediately.

On August 10, 2026, OpenAI launched GPT-5.6-Cyber, a variant of its flagship model with significantly reduced safety refusals, designed for offensive cybersecurity teams. The Daybreak program, initially a research partnership, is now an operational tool. Here is what this means for red teams and defenders.

CVE-2026-65667 is an unauthenticated privilege escalation in Microsoft Teams, rated CVSS 10.0, published August 6, 2026 outside the Patch Tuesday cycle. The advisory omits the affected component and the patched build — here's what security teams should do while they wait.

On August 6, 2026, MIT CSAIL researchers unveiled at Black Hat USA a new CPU attack that bypasses Spectre v2 fixes on both Intel and AMD processors. TONTOU exploits the gap between branch predictor neutralization and its actual use, extracting `/etc/shadow` at 5.47 bytes per second with 91.97% accuracy.

A vulnerability chain in WordPress Core, dubbed XSS2Shell, lets an unauthenticated attacker turn a single failed login attempt into full PHP remote code execution. The 7.0.3 patch landed August 6, 2026 — 43% of the web needs to apply it now.

An automated ransomware campaign dubbed RedLocker exploits passwordless Redis instances exposed to the internet. By August 4, 2026, 3,200 servers had already been compromised. Close port 6379 or enable Redis authentication now.

A new variant of the XCSSET malware compromises shared Xcode projects to infect compiled macOS applications. If you clone a repository from an infected developer, your final app ships the malware without a trace.

Forescout Vedere Labs presented 15 zero-touch provisioning vulnerabilities in TP-Link Omada at Black Hat USA, including 11 CVEs. SMBs deploying network gear via ZTP must patch immediately and rotate all exposed secrets.

On August 5, 2026, CISA added three critical vulnerabilities to its KEV catalog: CVE-2026-9198 in IBM Langflow (CVSS 9.8), CVE-2026-18576 in N-able N-central, and CVE-2026-34486 in Apache Tomcat. Federal agencies must patch immediately.

On August 3, 2026, SOCRadar documented DOUBLECUP, a Russian loader-as-a-service active since June 2026 that hides malicious code in browser‑cached PNG images. The ClickFix chain delivers CountLoader to Windows and macOS alongside a previously undocumented DeviceManager RAT steered by smart contracts.

EU Regulation 2024/2847, the Cyber Resilience Act, enters phased application starting in 2026. It requires every software vendor selling in the EU to produce a complete SBOM, fix known vulnerabilities within five business days, and notify critical incidents to ENISA within 24 hours. Here's what your organization must do before the first binding deadline.

On August 1, 2026, N-able detected active exploitation of an authentication bypass (CVE-2026-18577) in its N-central RMM platform. The fix for CVE-2026-18576 was incomplete, and attackers bypassed it in under thirty days. Here's what MSPs must do and why the RMM supply chain remains cybersecurity's weakest link.

On July 28, 2026, researcher Håkon Måløy published the first public demonstration of a document-borne AI worm capable of silently altering financial reports and self-propagating through Microsoft Copilot for Word. After 144 days of coordinated disclosure and two attempted fixes — including a model upgrade to GPT-5.6 — the vulnerability class remains exploitable.

On July 29, 2026, Cisco disclosed two zero-day vulnerabilities in Secure Firewall Management Center: static hardcoded credentials (CVE-2026-20316) and a CVSS 10.0 authentication bypass (CVE-2026-20079). Check your logs immediately — both flaws share the same indicator of compromise.

On July 14, 2026, Microsoft patched an AD CS flaw letting any authenticated user impersonate a domain controller. By July 27, the PoC was public — every unpatched domain is one script away from full compromise.

CVE-2026-16723 (CVSS 9.0) enables unauthenticated RCE on Fastjson 1.x with no patch forthcoming — ever. Enable SafeMode immediately and plan your Fastjson 2.x migration. Here is the three-step response plan.

CVE-2026-61511 enables unauthenticated PHP code execution through template rendering in vBulletin 5.x and 6.x. A public exploit exists, and the 5.x branch will receive no fix whatsoever.

Broadcom disclosed three critical VMware vulnerabilities on July 29, 2026 — a VMXNET3 VM escape and two unauthenticated RCE flaws targeting vCenter. Patch immediately: compromising vCenter gives an attacker total control over your entire virtualized infrastructure.

The first half of 2026 saw AI become an offensive weapon, zero-days consolidate into campaigns, and license wars fracture the open source stack. Here’s what every CISO and infrastructure lead needs to act on before the year ends.

99% of organizations experienced an API security incident in 2025. APIs now account for 43% of actively exploited vulnerabilities in CISA’s KEV catalog. Your API gateway is your new firewall — and you probably haven’t configured it.

Microsoft shipped its largest-ever Patch Tuesday, 24 billion stolen credentials surfaced on an exposed Elasticsearch cluster, and ransomware gangs claimed 721 new victims. Three records, one month — and none of them are a coincidence.

Mediaworks lost 8.5 TB of internal data to a ransomware group. Instructure paid ShinyHunters to keep 3.65 TB of Canvas data off the dark web. Across two weeks in May 2026, a cascade of breaches hit education, manufacturing, media, and retail — and barely anyone noticed. When breaches become background noise, the threat isn’t technical anymore. It’s apathy.

Check Point Research records 698 ransomware attacks worldwide in May 2026, a 48% year-over-year jump, even as overall attack volumes drop 7%. Fewer attacks, more impact — threat actors are getting better at doing more with less.

On March 31, 2026, Google shipped an emergency patch for CVE-2026-5281, an already-exploited use-after-free in Dawn, Chromium’s WebGPU implementation. It’s Chrome’s fourth zero-day in four months — and a clear signal that low-level graphics APIs have become the browser exploitation frontier.

On 20 January 2026, the European Commission proposed a revamped Cybersecurity Act that mandates removing high-risk foreign suppliers from the EU’s telecom networks and ICT supply chains. Operators have three years to comply, with fines reaching 7% of global turnover.

The group systematically exploited CVE-2024-50623 and CVE-2024-55956 in Cleo MFT products between October and December 2024, affecting over 180 organizations. The October patch failed; a second CVE had to be issued six weeks later.

On January 10, 2026, the BreachForums cybercrime bazaar suffered its own data breach: 324,000 user accounts with IP addresses, display names, and the forum’s official PGP key were published online. The leak is a goldmine for law enforcement and an operational catastrophe for members whose anonymity collapsed overnight.

Microsoft shipped an emergency out-of-band patch for CVE-2026-21509 on January 26, 2026. APT28 exploited it the next day against government institutions and financial-sector targets. The patch-to-exploit window just collapsed.

The SafePay ransomware group exfiltrated 8.5 terabytes of data from BPO giant Conduent between October 2024 and January 2025, exposing over 25 million individuals. It's the costliest supply chain breach of the year for US governments — and a wake-up call for any CISO who depends on a critical third party.

Attackers are deploying AI agents to automate reconnaissance, phishing, and exfiltration, compressing the breach-to-theft window to 72 minutes in the fastest observed cases. SOC teams that still rely solely on human-first triage are structurally unable to keep up.