1. Executive summary Mandiant's September 2026 report describes an attacker who hijacked an active AI coding-assistant session at an unnamed SaaS provider, used
1. Executive summary CVE-2026-58704 is an improper authorization flaw in the cellular modem of Google Pixel devices, where a logic error may allow an
1. Executive summary Malwarebytes has published a scam-hunting case study of a fake Avast "subscription renewed" page written in French and aimed at
1. Executive summary A critical authentication-bypass vulnerability in WSO2 API Manager, CVE-2026-5430, is reported to be under active exploitation in the wild, with
1. Executive summary A critical authentication bypass in WSO2 API Manager and related WSO2 gateway products — CVE-2026-5430, CVSS 10.0 (CRITICAL), CWE-347 (Improper
1. Executive summary A likely North Korean state-linked APT is reported to have used a previously undocumented Linux espionage toolkit to compromise load balancers, obtain
1. Executive summary Elastic Security Labs has documented KREMLIN, a previously undocumented Brazilian banking malware toolkit delivered by an actor it tracks as REF9334 and active
1. Executive summary Infoblox has published research arguing that Chinese-language casino and adult domains — a population it tracks at roughly 1.7 million sites — are
1. Executive summary On 2026-09-15, the ransomware leak-site index ransomware.live recorded the victim neumerkel-gmbh.de (Germany) as posted by a group
1. Executive summary On 2026-09-15, the ransomware leak-site indexer ransomware.live recorded a victim posting by a group calling itself "safepay"
1. Executive summary Apple has released its largest single patch cycle to date, addressing more than 260 CVEs across its operating systems, browsers and other products,
1. Executive summary Censys has published an internet-wide measurement of hosts exposing the open-source Mythic command-and-control (C2) framework, identifying 131 unique hosts