research2 sources
Attackers Use Personal Phones for Microsoft 365 Account Takeovers via Vishing
Cybercriminals are impersonating IT staff to trick employees into revealing Microsoft 365 credentials by calling their personal phones.
Sep 10, 2026
Stories
Every story we’ve synthesized.
Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,130 stories synthesized.
research2 sources
MantaxOtax Android Malware Blends Ransomware with Covert Spyware
The MantaxOtax Android malware has emerged as a sophisticated dual-threat, combining file encryption for ransom with extensive data exfiltration capabilities, targeting Indonesian users.
Sep 10, 2026 · updated Sep 11, 2026
advisory1 source
Cloudflare's 1.1.1.1 Deploys Post-Quantum DNSSEC Signatures
Cloudflare's 1.1.1.1 DNS resolver now validates DNSSEC signatures using ML-DSA-44, a post-quantum algorithm, preparing the internet's infrastructure for future quantum threats.
Sep 10, 2026
research1 source
Tenable Details 'Agentic Harness' for Secure AI Integration in Security Operations
Tenable has unveiled its 'agentic harness,' a control layer designed to safely integrate AI agents into security operations by treating them as untrusted insiders.
Sep 10, 2026
research1 source
RedTail Linux Malware Evolves with Process Masquerading and Multi-Architecture Support
Researchers have analyzed a sophisticated RedTail Linux payload found on a DShield honeypot, revealing its ability to masquerade as legitimate processes and support multiple hardware architectures.
Sep 10, 2026
research1 source
Workflow Identity Hijacking: Attackers Exploit AI Automation for Data Exfiltration
A new vulnerability, 'Workflow Identity Hijacking,' allows attackers to exfiltrate sensitive enterprise data by exploiting authorization gaps in AI workflows, bypassing traditional security measures.
Sep 10, 2026
kev1 source · 3 CVEs
LiteLLM Vulnerabilities Allow Root Code Execution and Cloud Credential Theft
Multiple critical vulnerabilities in the open-source AI gateway LiteLLM could allow attackers to execute code as root and steal sensitive cloud credentials.
Sep 10, 2026
patch4 sources · 4 CVEs
Check Point Patches Two Critical VPN Vulnerabilities Enabling Remote Code Execution
Check Point has released patches for two critical vulnerabilities, CVE-2026-85102 and CVE-2026-85103, both rated CVSS 9.8 and capable of unauthenticated remote code execution.
Sep 10, 2026 · updated Sep 14, 2026
research1 source
Attackers Impersonate Domain Controllers to Steal Active Directory Password Hashes
Threat actors are leveraging DCSync attacks to impersonate Active Directory domain controllers and steal password hashes, bypassing traditional security measures.
Sep 10, 2026
kev3 sources · 2 CVEs
Nation-State and Ransomware Actors Exploit Critical Cisco FMC Vulnerabilities
Two critical vulnerabilities in Cisco Secure Firewall Management Center (FMC) software are being actively exploited by nation-state actors, including Sandworm, and ransomware groups like Qilin.
Sep 10, 2026
breach1 source
AdaptHealth Data Breach Exposes Personal and Health Information of Over 4.1 Million Individuals
Healthcare provider AdaptHealth has disclosed a data breach impacting approximately 4.1 million individuals, with sensitive personal, health, and insurance data compromised.
Sep 10, 2026
patch1 source · 5 CVEs
Joomla Extensions SP Property & T4 Page Builder: Six Vulnerabilities Disclosed Together
Key findings • Six vulnerabilities disclosed on September 10, 2026, affect Joomla extensions SP Property and T4 Page Builder. • Critical SQL injection (CVE-2026-78082) and XSS (CVE-2026-78082…
Sep 10, 2026 · updated Sep 12, 2026
patch1 source · 1 CVE
Palo Alto PAN-OS Vulnerability Allows Root-Level Code Execution
A critical buffer overflow vulnerability in Palo Alto Networks' PAN-OS, CVE-2026-0310, enables unauthenticated attackers to achieve root-level code execution on PA-Series firewalls.
Sep 10, 2026
1 source
npm: 40 Malicious Packages with 'fantastic_z3n' and 'far-' Signatures Disclosed in 4 Minutes
Key findings • 40 malicious npm packages were disclosed in a coordinated attack. • All advisories were published within a tight four-minute window on September 10, 2026. • Packages exhibi…
Sep 10, 2026 · updated Sep 11, 2026
research1 source
AI Agents Dramatically Shorten Exploit Development Timelines
New AI capabilities allow exploit discovery from mere rumors, challenging traditional security embargo practices and necessitating faster response protocols.
Sep 10, 2026
kev1 source · 3 CVEs
CISA Mandates Patching for Exploited Cisco, Citrix, and Fortinet Vulnerabilities
CISA has added three critical vulnerabilities affecting Cisco, Citrix, and Fortinet products to its Known Exploited Vulnerabilities catalog, demanding federal agencies apply patches by September 12, 2026.
Sep 10, 2026
research1 source
OpenAI Deploys AI 'Defense Factory' to Automate Vulnerability Discovery and Remediation
OpenAI has developed an automated cybersecurity system, dubbed the 'Defense Factory,' that uses AI agents to continuously find, validate, and fix software vulnerabilities.
Sep 10, 2026
patch2 sources
WordPress Automates Plugin Security Reviews with AI to Block Risky Releases
WordPress.org has implemented an automated security review system using AI to scan all new plugin releases, automatically blocking those identified as potential risks before they reach users.
Sep 10, 2026
research1 source
Attackers Can Exploit Kubernetes SPIFFE/SPIRE for Workload Identity Spoofing
Researchers have detailed a post-exploitation technique allowing attackers with root access on a Kubernetes node to misuse SPIFFE/SPIRE metadata and impersonate co-located workloads.
Sep 10, 2026
scam1 source
Instagram Copyright Scam Suspends Accounts for Ransom
Scammers are exploiting Instagram's copyright reporting system to temporarily suspend user accounts and demand cryptocurrency for their reinstatement.
Sep 10, 2026
breach2 sources
Fake GTA 6 Download Bundles Malware, Ransomware for Eager Gamers
Cybercriminals are exploiting the immense anticipation for Grand Theft Auto VI by distributing malware-laden ISO files disguised as leaked game downloads.
Sep 10, 2026
advisory1 source · 18 CVEs
Geovision GV-LPC2211: 23 Vulnerabilities Disclosed, Enabling RCE and DoS
Key findings • 23 CVEs disclosed on 2026-09-10 for Geovision GV-LPC2211, impacting V1.13 and V1.14. • Multiple vulnerabilities allow for remote code execution as root via various input manipu…
Sep 10, 2026 · updated Sep 13, 2026
research1 source
Apple Introduces 'Reference Image' for Unalterable Photo Verification on iPhone 18 Pro
Apple's new opt-in 'Reference Image' feature for iPhone 18 Pro aims to combat image manipulation by creating an unalterable digital negative of photos at the sensor level.
Sep 10, 2026
trend1 source
Endpoint Encryption Management Takes Center Stage in 2026
The cybersecurity landscape in 2026 sees endpoint encryption management, not the encryption engines themselves, as the primary focus for businesses seeking robust data protection and compliance.
Sep 10, 2026