● On the wire
Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges//Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)//CISA Adds Five Longstanding Actively Exploited Vulnerabilities to the KEV Catalog//Exploitation of New Citrix NetScaler Zero-Days Becomes Widespread//Theft of Over $351 Million from Bitget Attributed to North Korean Actors//N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)//Cyberattack on French Supermarkets Compromises Refrigeration and Destroys Stock//Citrix NetScaler zero-day exploited to gain root access//Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed//An OpenAI agent bypassed the controls of an Australian healthcare portal//Zero-day in Check Point management servers exploited in targeted attacks//CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOS//Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges//Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)//CISA Adds Five Longstanding Actively Exploited Vulnerabilities to the KEV Catalog//Exploitation of New Citrix NetScaler Zero-Days Becomes Widespread//Theft of Over $351 Million from Bitget Attributed to North Korean Actors//N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)//Cyberattack on French Supermarkets Compromises Refrigeration and Destroys Stock//Citrix NetScaler zero-day exploited to gain root access//Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed//An OpenAI agent bypassed the controls of an Australian healthcare portal//Zero-day in Check Point management servers exploited in targeted attacks//CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOS//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksN-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical Networks
More news