CVE & Exploits · Sep 10, 2026
CISA expands KEV list, flagging critical Windows, N‑able and Adobe flaws
The Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday that it has added three newly…
T
Threat Desk
Threat desk.
300 stories filedFiled by Threat Desk
Ransomware · Sep 10, 2026
U.S. Treasury Targets Chinese Fraud Hub Xinbi Guarantee with OFAC Sanctions
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions against Xinbi…
CVE & Exploits · Sep 10, 2026
Cisco admits active exploitation of high‑severity FMC authentication bypass flaw
Cisco Systems has confirmed that a critical authentication bypass vulnerability identified as CVE-2026-20079 in its…
Phishing · Sep 10, 2026
AdaptHealth Says Cyberattack Compromised Data of Over 4 Million Individuals
AdaptHealth, a provider of home respiratory and related medical services, announced that a cyber intrusion discovered…
Breaches · Sep 9, 2026
Veradigm Confirms Limited Data Breach, Says Core Systems Unaffected
Electronic health‑record provider Veradigm announced that a security incident resulted in the theft of customer…
CVE & Exploits · Sep 9, 2026
Google rolls out September 2026 Android security patch addressing 180 flaws
Google has released its September 2026 security patch for Android devices, closing a total of 180 vulnerabilities that…
Ransomware · Sep 9, 2026
Veradigm Alerts Public to Patient Data Exposure Linked to Vendor Ransomware Attack
Healthcare technology firm Veradigm announced on Thursday that a cyber‑security breach at a third‑party service…
CVE & Exploits · Sep 9, 2026
Critical FortiPAM Chrome Extension Flaw Enables Proxy Hijack and Tab Surveillance
A severe security weakness has been uncovered in Fortinet's FortiPAM Chrome extension, allowing a malicious website to…
CVE & Exploits · Sep 9, 2026
Webinar Teaches Security Teams to Quickly Gauge Exposure After New CVE Disclosure
A critical software flaw was disclosed this week, prompting immediate alerts across the cybersecurity community. While…
CVE & Exploits · Sep 9, 2026
Zero‑Click XSS Flaw Discovered in MapLibre GL JS Prompts Immediate Upgrade
A critical cross‑site scripting (XSS) weakness identified as CVE‑2026‑85061 has been disclosed in the open‑source…
CVE & Exploits · Sep 9, 2026
Over 36,000 Plex Media Servers Remain Unpatched, Leaving Them Open to Attack
Security researchers have identified more than 36,000 Plex Media Server instances that are publicly reachable and have…
Threats · Sep 9, 2026
Cybercriminals Deploy Over 119,000 Fake Online Stores in DoppelCart Card‑Theft Scheme
Security researchers have identified a sprawling fraud operation known as "DoppelCart" that runs more than 119,000…