1. Executive summary Attackers are actively exploiting CVE-2026-89026 (CVSS 9.3, Critical; CWE-321, Use of Hard-coded Cryptographic Key) in Issabel Framework, the
1. Executive summary On 2026-09-16 the ransomware leak-site aggregator ransomware.live indexed a listing in which the group "qilin" names Thema
1. Executive summary The U.S. Coast Guard confirmed it boarded an oil tanker in the Gulf of Mexico on 21 August 2026 after indications that
1. Executive summary A single source IP, 94.102.49.125 (IP Volume, AS202425), has been conducting HTTP reconnaissance against hospitality-sector web applications since 15
1. Executive summary The Spanish Data Protection Agency (AEPD) has published details of what it describes as the first personal-data breach notification in Spain executed
1. Executive summary CVE-2026-87886 is a high-severity incorrect default permissions flaw in the Acronis Backup plugin for cPanel & WHM and the Acronis
1. Executive summary On 2026-09-16 the Akira ransomware group published a victim entry for "Manders" (country listed as GB) on its leak
1. Executive summary On 2026-09-15, CVE-2026-76460 was published for Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC)
1. Executive summary On 2026-09-16 CISA published Using Cyber Decoys to Strengthen Detection and Response, its first guide offering a detailed explanation of the
1. Executive summary Two critical-severity, unauthenticated code-injection vulnerabilities in The Events Calendar WordPress plugin — a component with more than 600,000 active installations — allow
1. Executive summary The FBI, UK NCSC and Netherlands AIVD have published a joint advisory on CHOSEN BRICK, a Windows-only surveillance and data-theft malware
1. Executive summary Spain's data protection agency (AEPD) has reported the country's first personal data breach attributed to the actions of an