Foreign Hackers Manipulate the Operational Systems of Two Colorado Water Utilities
Foreign actors breached the OT systems of two small private water utilities in Colorado in late August, altering plant settings, pumping cycles, and alarm configurations. The intruders also temporarily disabled remote access, but the incidents were brief and compromised neither water quality nor public safety. The affected facilities, which were not identified, serve fewer than 200 people in total, and…
Read the article →Theft of Over $351 Million from Bitget Attributed to North Korean Actors
Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at…
Read the article →FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally
The FBI and the U.S. Secret Service have issued a joint alert regarding 'FortiBleed,' a massive credential-harvesting campaign that has already compromised 86,644 Fortinet FortiGate devices and SSL VPN gateways across 194 countries. The…
Read the article →Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues…
Read the article →Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability in Secure Email Gateway's email parsing that is already being actively exploited. An unauthenticated remote attacker can send a specially crafted message containing SQL instructions, execute arbitrary…
Read the article →Brevo supply chain attack exposes over 100,000 websites
Brevo, the French marketing and communications platform formerly known as Sendinblue, suffered a supply chain attack that may have affected more than 100,000 websites. On September 10, the attackers reportedly exploited a vulnerability in…
Read the article →CISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency has added two flaws affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, confirming that they are being actively exploited. These include CVE-2026-65660, a…
Read the article →Two critical Citrix NetScaler zero-days exploited before patches became available
Citrix has confirmed the active exploitation of two critical vulnerabilities in NetScaler ADC and NetScaler Gateway, identified as CVE-2026-88771 and CVE-2026-88772. The flaws allow remote code execution and could therefore enable attackers to take…
Read the article →New Attack Vector Against Citrix NetScaler After Initial Patches
Researchers and administrators are reporting exploit activity against Citrix NetScaler, including on systems updated for CVE-2026-88771 and CVE-2026-88772. According to the information shared, the new method uses SAML requests to achieve malicious code execution…
Read the article →Critical Atlassian Vulnerability Exploited Hours After Details Were Published
Malicious actors are exploiting CVE-2026-21589, a critical vulnerability with a CVSS score of 9.3 affecting eight Atlassian Data Center products, including Confluence, Jira, Bitbucket, Bamboo, and Crowd. The flaw allows an unauthenticated attacker to…
Read the article →
CISA Flags Three Linux Kernel Vulnerabilities Already Exploited
Zero-day in Check Point management servers exploited in targeted attacks
F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog
Critical Zero-Day in Cisco Catalyst SD-WAN Manager Actively Exploited
Critical FortiMail zero-day actively exploited and added to the KEV catalog
Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited
An OpenAI agent bypassed the controls of an Australian healthcare portal
Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
CISA Flags Three Linux Kernel Vulnerabilities Already Exploited
Zero-day in Check Point management servers exploited in targeted attacks
F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog
Critical Zero-Day in Cisco Catalyst SD-WAN Manager Actively Exploited
Critical FortiMail zero-day actively exploited and added to the KEV catalog
Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited
An OpenAI agent bypassed the controls of an Australian healthcare portal
Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion- Citrix NetScaler zero-day exploited to take SAML deployments offline
- Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
- GitLab fixes CVSS 10 vulnerability already targeted by hostile scans
- Cisco Secure Email Gateway zero-day actively exploited with root privileges
- Cisco ISE Zero-Day with CVSS Score of 10 Actively Exploited
- Two Citrix NetScaler Zero-Days Exploited Globally
- Exploitation of New Citrix NetScaler Zero-Days Becomes Widespread
- Citrix NetScaler zero-day exploited to gain root access











