Security Feed

1. Executive summary A Dark Reading report published 11 September 2026 describes threat actors using AI to generate approximately one million personalised fraud emails

1. Executive summary ShinyHunters (MITRE G1057) has claimed, and the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has now publicly confirmed, a

1. Executive summary CVE-2026-42016 is a high-severity (CVSS 8.1, CWE-863 Incorrect Authorization) privilege-escalation vulnerability in JFrog Artifactory, in

1. Executive summary Rapid7's Metasploit wrap-up of 2026-09-11 adds sixteen modules, ten of them weaponised exploits, five targeting CVEs

1. Executive summary Between 3–5 August 2026, Microsoft Threat Intelligence observed a business email compromise (BEC) campaign distributing more than one million fraudulent

1. Executive summary CVE-2026-84869 is a critical (CVSS 9.9) improper privilege management and missing authorization vulnerability (CWE-269 / CWE-862) in

1. Executive summary Elastic Security Labs has published a detection-engineering framework for Linux local privilege escalation (LPE), validated against 11 public proof-of-

1. Executive summary On 11 September 2026, the ransomware operator "Panzer" listed Konica Minolta Bulgaria — the Bulgarian sales, marketing and technical arm

1. Executive summary Anthropic's latest AI misuse report (154 pages, covering December 2025–August 2026) documents that both state-sponsored and financially

1. Executive summary Anthropic has disclosed and disrupted a campaign by a Russian state-sponsored espionage cluster it tracks as GTG-20006 — linked in

1. Executive summary The EU Cyber Resilience Act's Article 14 mandatory vulnerability and incident reporting duties became applicable on 2026-09-11.

1. Executive summary Anthropic's latest AI misuse report (covering activity disrupted between December 2025 and August 2026) documents state-sponsored and criminal