Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…
Read the article →Cisco Secure Email Gateway zero-day actively exploited with root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability with a CVSS score of 9.8 affecting Secure Email Gateway that is already being exploited in real-world attacks. The flaw stems from insufficient validation in AsyncOS email…
Read the article →Cisco ISE Zero-Day with CVSS Score of 10 Actively Exploited
Cisco has confirmed the active exploitation of CVE-2026-76460, a critical authentication bypass vulnerability in Identity Services Engine, a platform used to control identities, devices, and access to corporate networks. The flaw stems from insufficient…
Read the article →Zero-day in Check Point management servers exploited in targeted attacks
Check Point has released urgent hotfixes for CVE-2026-93616, a critical path traversal vulnerability in its Security Management Servers that has already been exploited in real-world attacks. An attacker able to reach the web service…
Read the article →Exploitation of New Citrix NetScaler Zero-Days Becomes Widespread
Two serious vulnerabilities in Citrix NetScaler ADC and Gateway products are creating an emergency for organizations that expose these devices to the Internet. CVE-2026-88771, which can be exploited remotely in vulnerable default configurations, was…
Read the article →Critical Zero-Day in Cisco Catalyst SD-WAN Manager Actively Exploited
Cisco has confirmed the active exploitation of CVE-2026-76504, a zero-day vulnerability with a CVSS score of 9.8 affecting Catalyst SD-WAN Manager. The flaw in URI encoding handling allows an unauthenticated remote attacker to bypass…
Read the article →Critical FortiMail zero-day actively exploited and added to the KEV catalog
Fortinet has confirmed the active exploitation of CVE-2026-104286, a critical zero-day vulnerability in FortiMail email security gateways. The flaw, rated with a CVSS score of 9.8, combines path traversal and improper handling of NULL…
Read the article →Citrix NetScaler zero-day exploited to take SAML deployments offline
Citrix has fixed CVE-2026-88779, a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that has already been exploited in targeted attacks. The flaw, rated 8.7 out of 10, can cause repeated service crashes…
Read the article →Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
Microsoft set a new historic record by releasing fixes for as many as 973 vulnerabilities in the September 2026 Patch Tuesday, far surpassing the previous record of 664 updates in July. Among the flaws…
Read the article →Two critical Citrix NetScaler zero-days exploited before patches became available
Citrix has confirmed the active exploitation of two critical vulnerabilities in NetScaler ADC and NetScaler Gateway, identified as CVE-2026-88771 and CVE-2026-88772. The flaws allow remote code execution and could therefore enable attackers to take…
Read the article →










