1. Executive summary Microsoft's Digital Crimes Unit, working with Health-ISAC, Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver Foundation and TRM Labs, has executed
1. Executive summary CISA published ICS advisory ICSA-26-265-09 on 2026-09-22 covering CVE-2026-88020, a cross-site scripting vulnerability (CWE-79)
1. Executive summary On 22 September 2026 the Akira ransomware operation listed the Italian company DI.C.S.EL. S.R.L. on its leak site,
1. Executive summary Siemens has disclosed a Client Code Execution (CCE) vulnerability, CVE-2026-34223, affecting all versions of the Desigo CC building management station software
1. Executive summary Siemens ProductCERT advisory SSA-328642, republished by CISA as ICSA-26-265-04, discloses the "Copy Fail" vulnerability (CVE-2026-31431)
1. Executive summary CVE-2026-90898 (CVSS 9.8, CRITICAL, CWE-284 and CWE-306) is an unauthenticated command-execution flaw in Bifrost, an open-source
1. Executive summary ShinyHunters (MITRE G1057) claims to have breached the FBI by exploiting a pre-authentication remote code execution zero-day in Oracle PeopleSoft on
1. Executive summary Threat actors copied approximately 170 of CrowdSec's private GitHub repositories on 22 May 2026, using the GitHub account of a recently
1. Executive summary Siemens ProductCERT advisory SSA-254516, republished by CISA as ICSA-26-265-03, discloses CVE-2026-50093, an unrestricted file upload (CWE-434)
1. Executive summary CISA published ICSA-26-265-01 on 2026-09-22 covering CVE-2026-87121, an out-of-bounds write (CWE-787) in the
1. Executive summary CISA has published an ICS advisory for a double free vulnerability, CVE-2026-91018, in the lwIP (Lightweight IP) embedded TCP/IP stack,
1. Executive summary Microsoft's Digital Crimes Unit, backed by a US District Court for the Eastern District of Virginia order and supported by Health-