Ransomware: safepay named hbpro.pt (PT)
1. Executive summary On 2026-09-08, the ransomware operator "safepay" publicly listed the Portuguese company hbpro.pt as a victim on its leak
09 Sep 2026 · 5 min read
read →
// author
Jeff Davies
Ransomware: safepay named gayafores.es (ES)
1. Executive summary On 2026-09-08, the ransomware group "safepay" listed the Spanish ceramics manufacturer Gayafores (gayafores.es, headquartered in Onda, Castellón) as
09 Sep 2026 · 3 min read
read →
Ransomware: safepay named assiprime.it (IT)
1. Executive summary On 2026-09-08, the ransomware group operating under the name "safepay" publicly listed the Italian insurance brokerage and financial consulting
09 Sep 2026 · 4 min read
read →
Patch Tuesday - September 2026
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest single-day release in the company's history: 974 own-product CVEs
09 Sep 2026 · 12 min read
read →
ClickFix Campaigns Abuse Legitimate Services for Persistent Access
1. Executive summary ClickFix — a social-engineering technique in which a fake webpage (styled as a CAPTCHA check, browser update notice, or meeting error) instructs the
08 Sep 2026 · 6 min read
read →
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest release on record: 964 CVEs patched, 104 rated critical and 860 rated important,
08 Sep 2026 · 8 min read
read →
Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day
1. Executive summary Adobe has released patches for more than 170 vulnerabilities across its product line, headlined by CVE-2026-75650 (CVSS 10.0, CRITICAL, CWE-
08 Sep 2026 · 7 min read
read →
CVE-2026-75650 — Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
1. Executive summary CVE-2026-75650 is a CVSS 10.0 CRITICAL unauthenticated remote code execution vulnerability in Adobe Commerce, Adobe Commerce B2B and Magento Open
08 Sep 2026 · 8 min read
read →
CVE-2026-86218 — N-able N-central: N-able N-central Static Code Injection Vulnerability
1. Executive summary CVE-2026-86218 is a static code injection vulnerability in N-able N-central — the RMM platform widely deployed by managed service providers
08 Sep 2026 · 11 min read
read →
CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development
1. Executive summary CISA, NSA and FBI have issued a joint advisory warning that China-based AI companies — named as DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun
08 Sep 2026 · 5 min read
read →
Ransomware: akira named Brent Electric (GB)
1. Executive summary On 8 September 2026, the Akira ransomware operation (MITRE ATT&CK G1024) listed Brent Electric Inc., a US-founded electrical services and
08 Sep 2026 · 4 min read
read →
CVE-2026-85880 — Microsoft Windows: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
1. Executive summary CVE-2026-85880 is a heap-based buffer overflow (CWE-122, with CWE-908 use of uninitialized resource also recorded) in the Microsoft
08 Sep 2026 · 7 min read
read →