ARTEX automates secret discovery and is linked to breaches at seven South Korean financial institutions
A Hunt.io investigation reconstructed the infrastructure of ARTEX, an open-source autonomous penetration testing framework developed in China, linking it to breaches at seven South Korean financial institutions that occurred between late September and early October. The incidents exposed the personal, employment, income, and credit data of approximately 66,000–67,000 individuals and 2,200 companies. CrowdStrike assessed with moderate confidence that the campaign…
Read the article →
OpenSSH “SSHole” flaw exploited within hours of disclosure
Threat actors began exploiting CVE-2026-123158, dubbed SSHole, within hours of its public disclosure, even obtaining root privileges on a honeypot monitored by Previdian. The vulnerability allows remote access to certain accounts that administrators believed…
Read the article →
Binance Reconstructs the Theft of Over $6.3 Billion
Binance attributed the theft of approximately $6.3–$6.4 billion to a months-long campaign that began with fake job interviews targeting two engineers. The attackers allegedly combined social engineering, a tampered Homebrew installation, malware, stolen credentials,…
Read the article →
Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues…
Read the article →
Theft of Over $351 Million from Bitget Attributed to North Korean Actors
Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at…
Read the article →
Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)
Attackers are actively exploiting a chain of vulnerabilities known as 'MikroTrick' in MikroTik RouterOS routers with the SSH service exposed to the Internet. CERT Polska and expert Costin Raiu revealed that the attacks combine…
Read the article →
GitLab: Critical CVE-2026-85706 Vulnerability Exploited Within 24 Hours
GitLab has disclosed CVE-2026-85706, a path traversal vulnerability with a CVSS score of 10.0 in the repository commits API. An unauthenticated attacker can send a single specially crafted HTTP request to read arbitrary files…
Read the article →
Cisco Secure Email Gateway zero-day actively exploited with root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability with a CVSS score of 9.8 affecting Secure Email Gateway that is already being exploited in real-world attacks. The flaw stems from insufficient validation in AsyncOS email…
Read the article →
Cisco ISE Zero-Day with CVSS Score of 10 Actively Exploited
Cisco has confirmed the active exploitation of CVE-2026-76460, a critical authentication bypass vulnerability in Identity Services Engine, a platform used to control identities, devices, and access to corporate networks. The flaw stems from insufficient…
Read the article →
Brevo supply chain attack exposes over 100,000 websites
Brevo, the French marketing and communications platform formerly known as Sendinblue, suffered a supply chain attack that may have affected more than 100,000 websites. On September 10, the attackers reportedly exploited a vulnerability in…
Read the article →
N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)
CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOS
Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited
Zero-day in Check Point management servers exploited in targeted attacks
F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog
Attacks on European Refrigeration Systems Reach French Blood Banks
Foreign Hackers Manipulate the Operational Systems of Two Colorado Water Utilities
An OpenAI agent bypassed the controls of an Australian healthcare portalN-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedZero-day in Check Point management servers exploited in targeted attacksF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogAttacks on European Refrigeration Systems Reach French Blood BanksForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesAn OpenAI agent bypassed the controls of an Australian healthcare portal- Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
- OpenSSH Fixes Critical Authentication Bypass on musl-Based Linux Systems
- Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
- GitLab fixes CVSS 10 vulnerability already targeted by hostile scans
- Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges
- Cisco Fixes a Wide Range of Vulnerabilities in ISE, Including an Already Exploited Flaw
- Two critical Citrix NetScaler zero-days exploited before patches became available
- Two Citrix NetScaler Zero-Days Exploited Globally