1. Executive summary GitLab patched a critical authentication-bypass and file-placement flaw, tracked as CVE-2026-85706, on 10 September 2026; CISA added it to
1. Executive summary Three authentication-related flaws in JFrog Artifactory — CVE-2026-42018, CVE-2026-42016 and CVE-2026-82329 — have been exploited in the wild,
1. Executive summary Check Point Research's weekly bulletin for 14 September 2026 covers a Microsoft September Patch Tuesday of 974 vulnerabilities including two source-
1. Executive summary This item is not a vulnerability, breach or campaign report: it is a defensive research publication from Unit 42 describing a behavioural-clustering
1. Executive summary The UK government has expanded passkey authentication across GOV.UK One Login to a user base of more than 23 million, following a
1. Executive summary Telus, one of Canada's largest telecom providers, is notifying an undisclosed number of consumer telecom customers that their accounts were accessed
1. Executive summary On 10 September 2026 GitLab published an emergency patch release for CVE-2026-85706, a path traversal flaw (CWE-22) in the repository
1. Executive summary Revolut confirmed on Saturday 12 September 2026 that an attacker impersonating a government agency — sending from an email address on that agency'
1. Executive summary On 2026-09-12, a ransomware/extortion group operating under the name "krybit" listed eracm.fr — ERACM, the École Régionale d&
1. Executive summary A report published 2026-09-13 states that six in ten cyberattacks recorded in Colombia target health sector institutions, citing a Biofile report
1. Executive summary On 2026-09-13, the ransomware group self-styled "qilin" listed Gilco Scaffolding, a UK-based scaffolding contractor (www.gilcoscaffolding.com)
1. Executive summary Microsoft Security Research has disclosed two concurrent campaigns: a business email compromise (BEC) operation that sent over one million CEO-impersonation scam emails