1. Executive summary CISA has republished AVEVA security bulletin AVEVA-2026-006 covering four vulnerabilities in AVEVA Pipeline Integrity Monitor (PIMBoards) affecting versions up to and
1. Executive summary Cisco Talos has disclosed three distinct post-compromise activity clusters — two state-sponsored-linked and one crimeware/ransomware — actively exploiting two recently patched
1. Executive summary On 10 September 2026, the ransomware operator tracked as "lockbit5" listed the German-registered domain alphaomega-eng.com on its leak
1. Executive summary Proofpoint has documented a previously unobserved exploit kit, "BlueMoon," that chains two Chrome V8 JavaScript engine flaws with a Windows kernel
1. Executive summary A China-linked actor tracked as UNC3569 exploited an unpatched design flaw in the Windows version of Sogou Input Method — the dominant Chinese-
1. Executive summary On 11 September 2026, Check Point released patches for two critical (CVSS 9.8) vulnerabilities — CVE-2026-85102 (CWE-295, improper certificate validation)
1. Executive summary Microsoft Threat Intelligence reports a large-scale business email compromise (BEC) / invoice-fraud campaign that delivered over one million emails between 3–5
1. Executive summary SecurityWeek reports 33 cybersecurity-related M&A deals announced in August 2026, including acquisitions by Brinqa, Cribl, Datavault AI, Deel, Echo, Fortinet,
1. Executive summary CVE-2026-86060 is a critical (CVSS 9.2, CWE-88 argument injection) privilege-escalation vulnerability in MikroTik RouterOS that allows an attacker
1. Executive summary CVE-2026-67277 is a missing authentication for critical function vulnerability (CWE-306) in MikroTik RouterOS affecting the bandwidth-test (btest) service, rated
1. Executive summary An unknown, likely Russian-speaking criminal (attribution per GreyNoise; no MITRE ATT&CK group profile exists — treat as unconfirmed) used hundreds of
1. Executive summary On 2026-09-10, the ransomware group "clop" listed Harley-Davidson (harley-davidson[.]com, US) as a victim on its leak