Security news, decoded.

What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.

RSS

Latest signal Dark Reading7 h ago

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

Open at Dark Reading

KEV CVE-2026-20079 KEV CVE-2026-20316

YesterdayMon, Sep 1415 stories

20:198 h ago

Dark Reading5 min read

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

KEV CVE-2026-85706 9.4 CVE-2026-19478

18:3310 h ago

SANS Internet Storm Center26 min read

Apple Updates Everything - SANS Internet Storm Center

KEV CVE-2026-65400 8.8 CVE-2026-43692 8.8 CVE-2026-43715 8.8 CVE-2026-43794 8.8 CVE-2026-65346 + 256 more

18:0111 h ago

The Hacker News6 min read

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

KEV CVE-2024-21762

16:5612 h ago

The Hacker News5 min read

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

KEV CVE-2026-60004

16:1512 h ago

BleepingComputer3 min read

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

7.5 CVE-2026-39364 5.3 CVE-2025-30208 KEV CVE-2025-31125 4.8 CVE-2024-45811

14:4014 h ago

The Hacker News23 min read

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

10.0 CVE-2026-44756 KEV CVE-2026-85706 9.9 CVE-2026-12645 9.9 CVE-2026-12646 9.9 CVE-2026-12647 + 51 more

12:2216 h ago

Check Point Research Exploited IDScan.net ShinyHunters6 min read

14th September – Threat Intelligence Report

KEV CVE-2026-72898 KEV CVE-2026-85706 KEV CVE-2026-86060 KEV CVE-2026-85046 KEV CVE-2026-81963 + 2 more

11:5117 h ago

SecurityWeek Exploited Sogou Input Method UNC35693 min read

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

— CVE-2026-51990

09:2719 h ago

SecurityWeek Exploited JFrog Artifactory auth-bypass3 min read

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment

KEV CVE-2026-82329 KEV CVE-2026-42016 KEV CVE-2026-42018 7.3 CVE-2026-4201

08:2720 h ago

OX Security Patch next (npm) rce5 min read

Four Critical CVEs, the Same Trust Issue

9.8 CVE-2026-78676 9.0 CVE-2026-75604 — CVE-2026-75595

08:2520 h ago

SecurityWeek Exploited ConnectWise ScreenConnect rce2 min read

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks

KEV CVE-2026-84869

08:0521 h ago

OX Security Research Netty cryptography12 min read

Technical Analysis: Netty CVE-2026-75595, Next.js CVE-2026-75604, GHSA-2xp9-vwfh-vxw4 & GitPython CVE-2026-78676

9.8 CVE-2026-78676 9.0 CVE-2026-75604

07:4021 h ago

Help Net Security Roundup Debian Trixie patch-tuesday4 min read

Debian 13.7 ships the fixes behind 92 security advisories, updates 106 packages

9.8 CVE-2026-5450 9.1 CVE-2026-34873 9.1 CVE-2026-42496 8.2 CVE-2026-46728 8.1 CVE-2024-42040 + 15 more

07:0621 h ago

BleepingComputer Exploited GitLab CE zero-day3 min read

CISA: Hackers now exploit max severity GitLab flaw in attacks

KEV CVE-2026-85706 KEV CVE-2021-22175 KEV CVE-2021-39935

06:0023 h ago

Help Net Security Research KTH Royal Institute of Technology ics-ot-iot4 min read

Turn it off and on again, but for critical infrastructure

KEV CVE-2017-7494

Earlier this weekWed, Sep 9 – Mon, Sep 1424 stories

Sun2 d ago

BleepingComputer Exploited Sogou Input Method UNC35693 min read

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

— CVE-2026-51990

Sun2 d ago

Help Net Security Exploited F5 BIG-IP APM ransomware18 min read

Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited

KEV CVE-2026-20079 KEV CVE-2026-86218 KEV CVE-2026-87491 KEV CVE-2026-20316

Sat3 d ago

The Hacker News Exploited JFrog Artifactory privilege-escalation5 min read

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

KEV CVE-2026-84869 KEV CVE-2026-82329 KEV CVE-2026-86060 KEV CVE-2026-67277 KEV CVE-2026-42016 + 1 more

Sat3 d ago

BleepingComputer Advisory Check Point VPN network-edge3 min read

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

9.8 CVE-2026-85102 9.8 CVE-2026-85103

Sat3 d ago

SecurityWeek Exploited Google Chrome Violet Typhoon3 min read

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

KEV CVE-2026-85046 KEV CVE-2026-87491 KEV CVE-2026-85880

Fri4 d ago

The Hacker News Exploited GitLab CE web-app3 min read

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

KEV CVE-2026-85706 9.9 CVE-2026-87719 9.4 CVE-2026-19478

Fri4 d ago

BleepingComputer Exploited JFrog Artifactory auth-bypass3 min read

Artifactory flaws chained in attacks deploying backdoor malware

KEV CVE-2026-82329 KEV CVE-2026-42016 KEV CVE-2026-42018 7.3 CVE-2026-4201

Fri4 d ago

SecurityWeek Exploited GitLab CE info-disclosure2 min read

GitLab Vulnerability Exploited One Day After Disclosure

KEV CVE-2026-85706 9.9 CVE-2026-87719

Fri4 d ago

SecurityWeek Exploited WordPress Super Forms CyberAv3ngers5 min read

In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review

9.8 CVE-2026-14894

Fri4 d ago

Bishop Fox Exploited JFrog Artifactory auth-bypass11 min read

CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key

KEV CVE-2026-82329

Fri4 d ago

BleepingComputer Patch GitLab CE info-disclosure3 min read

GitLab urges users to patch max severity path traversal flaw

10.0 CVE-2023-2825 KEV CVE-2026-85706 9.9 CVE-2026-87719 KEV CVE-2021-22175 KEV CVE-2021-39935

Fri4 d ago

SecurityWeek Patch Check Point Security Gateway rce2 min read

Check Point Patches Critical VPN Vulnerabilities

KEV CVE-2026-16232 9.8 CVE-2026-85102 9.8 CVE-2026-85103 KEV CVE-2026-50751

Fri4 d ago

Help Net Security Exploited PaperCut NG/MF rce3 min read

AI agents exploited PaperCut flaws to breach 395 organizations

KEV CVE-2026-81578 KEV CVE-2026-82078

Fri4 d ago

SecurityWeek Exploited PaperCut NG/MF rce3 min read

PaperCut Flaws Exploited in AI-Powered Attacks

KEV CVE-2026-81578 KEV CVE-2026-82078

Fri4 d ago

The Hacker News Exploited JFrog Artifactory rce7 min read

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

KEV CVE-2026-82329 KEV CVE-2026-42016 KEV CVE-2026-42018 7.3 CVE-2026-4201

Fri4 d ago

The Hacker News Exploited Sogou Input Method UNC35698 min read

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

KEV CVE-2021-38003 — CVE-2026-51990

Fri4 d ago

The Hacker News Exploited PaperCut NG/MF ransomware3 min read

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

KEV CVE-2026-81578 KEV CVE-2026-82078

Fri4 d ago

The Hacker News Exploited Secure Firewall Management Center Sandworm3 min read

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

KEV CVE-2026-20079 KEV CVE-2026-20316

Thu4 d ago

Cisco Talos Exploited Microsoft Defender UAT-108209 min read

We've got one word for it, and it's usually the wrong one

KEV CVE-2026-20079 KEV CVE-2026-20316

Thu4 d ago

The Hacker News Roundup Chrome data-breach23 min read

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

8.0 CVE-2026-28662

Thu5 d ago

Dark Reading PoC Windows Defender privilege-escalation6 min read

Nightmare-Eclipse Strikes Again with 'ShieldCrash' Windows Exploit

7.8 CVE-2026-69414

Thu5 d ago

Bishop Fox Research NetScaler ADC auth-bypass16 min read

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

KEV CVE-2026-19490

Thu5 d ago

SecurityWeek Exploited Citrix NetScaler ADC auth-bypass2 min read

Critical NetScaler Vulnerability Exploited in Attacks

KEV CVE-2026-19490

Thu5 d ago

The Hacker News Patch Check Point Security Gateway rce6 min read

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

KEV CVE-2026-16232 9.8 CVE-2026-85102 9.8 CVE-2026-85103 KEV CVE-2026-50751