1. Executive summary On 2026-09-08, the ransomware operator branding itself "lockbit5" listed the Dutch financial services firm FDC Putman (fdcputman.nl) as
1. Executive summary Microsoft's September 2026 Patch Tuesday is the largest release on record: 973 vulnerabilities patched, 113 rated critical, well ahead of the
1. Executive summary CVE-2026-81963 is a link following vulnerability (improper link resolution before file access; CWE-59 / CWE-284) in the Microsoft Windows Update
1. Executive summary Cisco Talos has documented two related infection chains — tracked under loader names "pf.ch" and "verification.google" — that deliver
1. Executive summary Google Threat Intelligence Group's (GTIG) Q3 2026 AI Threat Tracker documents threat actors moving from single AI prompts to multi-step
1. Executive summary Check Point Research (Alexey Bukhteyev) has disclosed a cross-tenant isolation failure in ChatGPT's code-execution sandbox, discovered independently in June
1. Executive summary French prosecutors have confirmed the 18 August 2026 arrest in the Paris region of an 18-year-old suspected member of the French-
1. Executive summary Security firm Calif privately demonstrated to Tencent a "zero-click" worm ("WeWorm") built on a critical memory-corruption vulnerability
1. Executive summary Rapid7 has disclosed two new vulnerabilities in N-able N-central — CVE-2026-86206 (CVSS 6.9 MEDIUM, CWE-791, not in CISA
1. Executive summary Red Hat has disclosed a two-flaw chain that allows a completely unauthenticated network client to write a Kerberos identity of its own
1. Executive summary Stadtwerke Landsberg, a city-owned municipal utility in Bavaria, disclosed on 8 September 2026 that attackers encrypted its central IT network in an
1. Executive summary Cisco Talos documents a monthslong criminal campaign (active since early October 2025, ongoing as of August 2026) that weaponises the Google Visualization API