3+ hour, 10+ min ago   (997+ words) This week’s roundup covers a massive Microsoft Patch Tuesday with two exploited zero-days, active FortiGate exploitation, a critical PAN-OS root-level RCE flaw, the Revolut KYC data breach, and more than 20 other stories spanning AI-driven cyberattacks, browser and firewall zero-days, and…...

21+ hour, 7+ min ago   (591+ words) Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems running the September 2026 security updates. It is the third consecutive bypass of the same component…...

21+ hour, 17+ min ago   (416+ words) Silverfort frames the incident as a warning specifically about identity security. Its analysis argues that automated, AI-driven credential harvesting and lateral movement can escalate to domain-admin control far faster than most organizations’ detection and response processes are built to handle,…...

1+ day, 2+ hour ago   (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...

20+ hour, 20+ min ago   (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...

1+ day, 3+ hour ago   (1541+ words) 1. Basic Information Original Title: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent Source: BleepingComputer, Dutch NCSC, Check Point Published Date: 2026-09-12 Severity: High Basis for Severity: Both CVSS 9.8 vulnerabilities allow unauthenticated remote code execution. Although the reference materials do…...

4+ day, 20+ min ago   (295+ words) AI-powered Automox Worklet™ generation closes the time window between AI-speed cybersecurity vulnerability disclosure and exposure mitigation: built to mitigate at AI speed, vetted by humans, turning vulnerabilities into verified endpoint action even when a patch isn't the immediate fix. These…...

1+ day, 10+ hour ago   (341+ words) Beta Build 26220.9343 lets Windows 11 recover over Wi-Fi or Ethernet directly from WinRE, no boot drive needed The recovery path runs through WinRE, and setup is straightforward before anything starts downloading. Getting there takes two routes: boot into the Windows Recovery…...

1+ day, 11+ hour ago   (25+ words) The Dutch NCSC now expects attackers to target two critical Check Point VPN flaws soon, despite no public proof-of-concept exploit. The warning raises the urgen...