Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 10, 2026

Cisco and CISA Alert Organizations to Active Exploitation of Secure FMC Flaw

Cisco Systems and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly warned that a critical…

CVE & Exploits · Sep 10, 2026

OpenAI Unveils ‘Defense Factory’ to Counter AI‑Driven Cyber Threats

OpenAI announced Tuesday that it is launching a new cybersecurity unit called the “Defense Factory,” a program built…

CVE & Exploits · Sep 10, 2026

Enterprise Patch Management Landscape in 2026: Tiered Solutions for Every IT Environment

Choosing the right patch management platform in 2026 hinges on the size and complexity of an organization’s IT estate,…

CVE & Exploits · Sep 10, 2026

Microsoft releases September Patch Tuesday update to restore lost Windows desktop settings

Microsoft announced on September 10, 2026 that the latest Patch Tuesday roll‑out includes a fix for a problem that…

CVE & Exploits · Sep 10, 2026

CISA expands KEV list, flagging critical Windows, N‑able and Adobe flaws

The Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday that it has added three newly…

CVE & Exploits · Sep 10, 2026

Zero-Day ‘ShieldCrash’ Grants Full System Access on Patched Windows PCs

A newly discovered vulnerability dubbed “ShieldCrash” is allowing attackers to obtain unrestricted system privileges on…

CVE & Exploits · Sep 10, 2026

Hackers Exploit ClickFix Ads to Install macOS Stealer MacSync

Cybercriminals are leveraging a combination of deceptive ClickFix advertisements and search‑engine malvertising to…

CVE & Exploits · Sep 10, 2026

Fortinet Patches Critical Remote Code Execution Bug After PivotC2 RAT Exploits Surface

Security researchers have confirmed that a high‑severity, unauthenticated vulnerability in Fortinet's networking…

CVE & Exploits · Sep 10, 2026

Latin American Threat Actors Deploy Commercial AI Models to Accelerate Post‑Exploitation

Security analysts have observed a marked rise in the use of commercial large language models (LLMs) by cybercriminals…

CVE & Exploits · Sep 10, 2026

Four State-Sponsored Groups Deploy Identical Chrome Zero-Day Kit Within Two Weeks, Researchers Say

Security researchers have identified that four separate nation‑state cyber‑espionage groups adopted the same Chrome and…

CVE & Exploits · Sep 10, 2026

AI-Driven Campaign Targets Hundreds of PaperCut Servers in Global Attack

Threat intelligence firm GreyNoise has uncovered a coordinated intrusion effort that has compromised at least 440…

CVE & Exploits · Sep 10, 2026

New Exploit Kit ‘BlueMoon’ Merges Chrome and Windows Flaws, Tied to Chinese Cyber Actors

A sophisticated exploit kit dubbed BlueMoon has been identified by security researchers as rapidly spreading across the…