1. Executive summary A bypass has been published for the decompression-bomb fix in adm-zip 0.6.0, the npm archive library. The fix for
1. Executive summary On 2026-09-29 the BrainCipher ransomware operation listed maxwell-group.com, a UK-registered domain, on its public leak site. The listing
1. Executive summary Two critical NetScaler vulnerabilities, CVE-2026-88771 (CVSS 9.5, CWE-20) and CVE-2026-88772 (CVSS 9.5, CWE-119), were exploited
1. Executive summary Microsoft's Detection and Response Team (DART) has published an investigation into an intrusion it attributes to a tracked cluster it calls
1. Executive summary Electron has shipped a follow-up fix for CVE-2026-70604, a CORS enforcement gap in custom protocol schemes registered with supportFetchAPI: true
1. Executive summary Two HIGH-severity vulnerabilities in the Lantronix G520 Series Cellular Gateway (CVE-2026-84409, CVSS 3.1 7.5 / CVSS 4.0 7.
1. Executive summary A ransomware operation calling itself Vexy Ransomware listed Groupe Proxitel, a French B2B technology and connectivity provider based in Avignon, on its public
1. Executive summary A ransomware leak-site listing attributed to a group calling itself AuditTeam names a victim recorded only as "Paid Victim 32373FFB7AF7E725"
1. Executive summary Researchers at Glow Security have identified more than 13,000 sensitive screenshots of corporate software projects, drawn from 343 organisations, that AI coding
1. Executive summary Academic researchers at VUSec (Vrije Universiteit Amsterdam) and Scuola Superiore Sant'Anna have disclosed Branch Target Reuse (BTR), a new Spectre v2
1. Executive summary CISA published ICSA-26-272-03 on 29 September 2026 covering CVE-2026-22755, a command injection flaw in VIVOTEK camera firmware modules
1. Executive summary CISA published ICSA-26-272-02 on 2026-09-29 covering ten vulnerabilities in Toptech Systems TMS7 and TopHAT, a terminal management system