September 2026
189 security articles published this month.
94
critical
18
high
1
medium
64
low
12
Advisory
42
Breaches
7
News
18
Intel
110
Learn
2
Research
0
Malware
10
Advisory
(42) critical Sep 30
Joomla CCK unauthenticated RCE (CVE-2026-102427) [PoC]
critical Sep 30
Zammad session hijack RCE exploited in the wild (CVE-2026-102489) [PoC]
critical Sep 30
Zammad local user to root, exploited (CVE-2026-102490)
critical Sep 30
Tugtainer agent auth bypass, no secret set (CVE-2026-55494) [PoC]
critical Sep 30
Cisco Catalyst SD-WAN Manager auth bypass exploited (CVE-2026-76504) [PoC]
critical Sep 30
Joomla JCTables SQLi reads and writes data (CVE-2026-76570) [PoC]
critical Sep 28
Real Estate Manager SQLi lets attackers read DB (CVE-2026-100752) [PoC]
critical Sep 28
Joomla Vehicle Manager SQLi leaks database (CVE-2026-101108) [PoC]
critical Sep 28
Book Library SQLi leaks Joomla data, no auth (CVE-2026-101110) [PoC]
high Sep 28
Apple iOS file parsing RCE exploited (CVE-2026-86950) [PoC]
critical Sep 27
NetScaler unauth RCE exploited in the wild (CVE-2026-88771) [PoC]
critical Sep 27
NetScaler RCE exploited in the wild (CVE-2026-88772) [PoC]
critical Sep 26
Contact Form 7 Addons unauth RCE (CVE-2026-82901) [PoC]
critical Sep 26
Joomla YouTube Gallery SQLi reads database (CVE-2026-94130) [PoC]
critical Sep 26
AcyMailing RCE, unauthenticated email upload (CVE-2026-94132) [PoC]
critical Sep 26
Joomla UP plugin RCE, patch now (CVE-2026-97163) [PoC]
critical Sep 25
WooCommerce OTP plugin grants admin, no patch (CVE-2026-14281) [PoC]
critical Sep 24
Decepticon indirect prompt injection RCE (CVE-2026-61732) [PoC]
critical Sep 22
FortiPAM Chrome Extension leaks credentials (CVE-2026-84388) [PoC]
high Sep 22
WordPress get_page_template RCE actively exploited (CVE-2026-87902) [PoC]
critical Sep 22
Check Point Management Server exploited in the wild (CVE-2026-93616) [PoC]
critical Sep 22
VeloCloud Orchestrator unauth RCE, exploited (CVE-2026-93952)
critical Sep 22
BIG-IP APM unauthenticated RCE exploited in the wild (CVE-2026-94127) [PoC]
high Sep 17
Acronis cPanel plugin root escalation exploited (CVE-2026-87886)
critical Sep 16
Cisco ISE auth bypass, exploited in wild (CVE-2026-76460) [PoC]
high Sep 15
Cellular Modem permission bypass, exploited (CVE-2026-58704)
high Sep 14
BioStar 2 leaks AD service credentials (CVE-2026-31278) [PoC]
critical Sep 14
Cisco Secure Email Gateway RCE exploited (CVE-2026-76461) [PoC]
critical Sep 12
GitLab unauth file read, exploited (CVE-2026-85706) [PoC]
critical Sep 9
Check Point Quantum VPN RCE exploited in the wild (CVE-2026-85102)
high Sep 9
Chrome V8 RCE exploited in the wild (CVE-2026-87491) [PoC]
high Sep 8
Windows Update Stack local privilege escalation (CVE-2026-81963)
critical Sep 8
ScreenConnect client RCE actively exploited (CVE-2026-84869)
high Sep 8
Windows ALPC local privilege escalation (CVE-2026-85880)
critical Sep 7
Adobe Commerce template RCE, exploited (CVE-2026-75650) [PoC]
critical Sep 6
N-central unauthenticated RCE, exploited (CVE-2026-86218) [PoC]
high Sep 5
RouterOS btest kernel crash, exploited (CVE-2026-67277)
medium Sep 5
RouterOS unauth file overwrite, exploited (CVE-2026-67279) [PoC]
critical Sep 5
RouterOS SSH login privilege escalation, exploited (CVE-2026-86060) [PoC]
high Sep 3
Chrome 152 sandbox RCE actively exploited (CVE-2026-85046) [PoC]
critical Sep 1
SMA1000 SSRF exploited in the wild (CVE-2026-83548) [PoC]
high Sep 1
SMA1000 AMC command injection exploited (CVE-2026-83549)
Breaches
(7) high Sep 30
Medela Breach: 424K Healthcare Contacts Leaked (2026)
critical Sep 22
LimeLeads Breach: 17.8M Email Addresses Exposed (2026)
high Sep 21
Burger King Russia Breach: 3.2M Emails & Phone Numbers Leaked
high Sep 13
Chess.com Breach: 4.6M Emails Scraped & Exposed (2026)
high Sep 10
McKesson Breach: 6.4M Email Addresses Leaked (2026)
high Sep 2
Manchester Airports Breach: 8.7M Passengers' Data Leaked (2026)
high Sep 1
Questel Breach: 1.2M Business Contacts Exposed (2026)
News
(18) critical Sep 29
Apple fixes iOS CoreGraphics zero-day CVE-2026-86950
critical Sep 29
Citrix NetScaler CVE-2026-88772 exploited, root access
critical Sep 27
Citrix NetScaler zero-days exploited, RCE confirmed
critical Sep 26
Oracle PeopleSoft CVE-2026-35273 exploited, web shells
critical Sep 25
WSO2 and Adobe Commerce bugs exploited, CISA KEV
critical Sep 23
Check Point VPN RCE exploited, admins urged to patch
critical Sep 23
MikroTrick chain takes over MikroTik routers, no passwo
critical Sep 19
CISA adds Linux kernel CVE-2025-39682 to KEV catalog
critical Sep 17
Cisco ISE zero-day exploited, CVSS 10.0 auth bypass
critical Sep 15
Cisco Secure Email Gateway zero-day actively exploited
critical Sep 12
CISA adds 5 exploited bugs to KEV catalog
critical Sep 11
GitLab CVSS 10 file-read bug probed in the wild
critical Sep 10
Cisco FMC bugs exploited to deploy Qilin ransomware
critical Sep 9
N-able N-central Pre-Auth RCE Flaw Exploited in the Wil
critical Sep 5
PaperCut flaws abused in school credential theft
critical Sep 3
CISA Adds Seven Exploited Flaws as Attackers Deploy Rev
critical Sep 2
Hackers exploit critical JFrog Artifactory flaw to forg
critical Sep 2
Sangoma Switchvox SQLi exploited for reverse shells
Intel
(110) critical Sep 30
Dr Damiel Pugliese Ransomware Claim by lamashtu (Sep 2026)
critical Sep 30
Europrim Ransomware Claim by thegentlemen (Sept 2026)
critical Sep 30
FIDUCIAL Ransomware Claim by Lamashtu (Sep 2026)
low Sep 30
Vinco Energy Ransomware Claim by Lamashtu (Sep 2026)
low Sep 30
VUS English Center Ransomware Claim by thegentlemen (Sep 2026)
low Sep 29
Amazon Informatica Ransomware Claim by emperador (Sep 2026)
critical Sep 29
Carolina Asthma Ransomware Claim by Chaos (Sep 2026)
critical Sep 29
Coosalud Ransomware Claim by threeam (Sep 2026)
low Sep 29
Goodrich Logistics Ransomware Claim by Doommageddon (Sep 2026)
low Sep 29
St James' Anglican School Claimed by threeam (Sep 2026)
low Sep 28
ATCO Ltd Ransomware Claim by MedusaLocker (Sep 2026)
critical Sep 28
Bio-Strath Ransomware Claim by safepay (Sep 2026)
low Sep 28
North Slope Borough Schools Ransomware Claim by INC (Sep 2026)
low Sep 28
Ressources Si Ransomware Claim by Panzer - Sept 2026
critical Sep 28
SMCare Ransomware Claim by Panzer - Sept 2026
low Sep 27
Ar Valve Resources Ransomware Claim by Wallstreet (Sep 2026)
low Sep 27
Car Service Abschlepp Ransomware Claim by emperador (Sep 2026)
low Sep 27
ETS Ransomware Claim by Everest - September 2026
critical Sep 27
Morula IVF Ransomware Claim by Everest (Sep 2026)
critical Sep 27
Tobin & Company Ransomware Claim by Wallstreet (Sep 2026)
critical Sep 26
ANP Health Ransomware Claim by thegentlemen (Sep 2026)
low Sep 26
Apollo 21 Ransomware Claim by BlackLocks (Sep 2026)
low Sep 26
GE Vernova Ransomware Claim by metaencryptor (Sep 2026)
critical Sep 26
Guardrisk Ransomware Claim by thegentlemen (Sep 2026)
critical Sep 26
Platinum Healthcare Staffing Ransomware Claim by metaencryptor (Sep 2026)
low Sep 25
Agora Coopérative Agricole Ransomware Claim by Qilin (Sep 2026)
critical Sep 25
Armada Credit Bureau Ransomware Claim by Spirals (Sep 2026)
critical Sep 25
Pharma5 Ransomware Claim by INC Ransom (Sep 2026)
critical Sep 25
Taspen Life Ransomware Claim by LockBit5 (Sep 2026)
critical Sep 25
Westside GI Ransomware Claim by pear - Sept 2026
low Sep 24
Agiliance Ransomware Claim by ZaWoo (Aug 2026)
low Sep 24
AMB PVC Ransomware Claim by ZaWoo (Aug 2026)
low Sep 24
BMGP Groupe Ransomware Claim by DragonForce (Sep 2026)
low Sep 24
Final Statement PSA Ransomware Claim by shinyhunters (Sep 2026)
critical Sep 24
Francare Ransomware Claim by ZaWoo (Aug 2026)
low Sep 23
Aokkef Ransomware Claim by MedusaLocker (Sep 2026)
low Sep 23
Merrimack County Ransomware Claim by Booba Project (Sep 2026)
low Sep 23
PSA Ransomware Claim by ShinyHunters (Sep 2026)
critical Sep 23
Smart Eye Care Ransomware Claim by Booba Project (Sep 2026)
low Sep 23
Washington County Ransomware Claim by Booba Project (Sep 2026)
critical Sep 22
Alabama Woman's Health Care Ransomware Claim by emperador
low Sep 22
Spo**** Schools Ransomware Claim by nightspire (Sep 2026)
critical Sep 22
theLender Ransomware Claim by termite (Sept 2026)
low Sep 22
U.S. Electrical Services Ransomware Claim by moneymessage
low Sep 22
VIT Vellore Ransomware Claim by AuditTeam (Sep 2026)
low Sep 21
Charlottesville PD Ransomware Claim by Doommageddon (Sep 2026)
critical Sep 21
Hudson MD Group Ransomware Claim by metaencryptor (Sep 2026)
critical Sep 21
Siinqee Bank Ransomware Claim by LockBit5 (Sep 2026)
critical Sep 21
The Money Store Ransomware Claim by Storm (Sep 2026)
critical Sep 21
TrueCore Behavioral Ransomware Claim by Storm (Sep 2026)
low Sep 20
ambpvc Ransomware Claim by ZaWoo - August 2026
low Sep 20
FRANCARETRAD Ransomware Claim by ZaWoo (Aug 2026)
low Sep 20
HEOLIS Ransomware Claim by ZaWoo - August 2026
low Sep 20
Schneider's Computing Ransomware Claim by arcusmedia (Sep 2026)
low Sep 20
Touring Club Suisse Ransomware Claim by Qilin (Sep 2026)
critical Sep 19
AstraZeneca Türkiye Ransomware Claim by N0n (Sep 2026)
low Sep 19
Cassias MG Government Ransomware Claim by emperador (Sep 2026)
critical Sep 19
Hygear Ransomware Claim by LockBit5 (Sep 2026)
low Sep 19
Quy Nhon University Ransomware Claim by Vexy (Sep 2026)
critical Sep 19
Transcom PayPal Support Ransomware Claim by N0n (Sep 2026)
low Sep 18
AT&T Ransomware Claim by EndZone - Sept 2026
critical Sep 18
First Secure Community Bank Ransomware Claim by Storm (Sep 2026)
low Sep 18
Inland and Offshore Contractors Hit by qilin - Sep 2026
critical Sep 18
Johnson Investment Counsel Ransomware Claim by Storm (Sep 2026)
low Sep 18
Stim Ransomware Claim by Panzer - September 2026
low Sep 17
dg.ac.kr Ransomware Claim by AuditTeam (Sep 2026)
low Sep 17
Namibian Defence Force Ransomware Claim by ransomhouse (Sep 2026)
critical Sep 17
Optimum First Mortgage Ransomware Claim by blacknevas (Sep 2026)
low Sep 17
Thema Foundries Ransomware Claim by Qilin (Sep 2026)
low Sep 17
Westbridge Institute Ransomware Claim by emperador (Sep 2026)
high Sep 16
Fort Smith Arkansas Ransomware Claim by Interlock (Sep 2026)
low Sep 16
gob.pe Ransomware Claim by safepay (Sep 2026)
critical Sep 16
Owen Leigh Optometry Ransomware Claim by DragonForce (Sep 2026)
low Sep 16
Springfield Public Schools Ransomware Claim by Interlock (Sep 2026)
critical Sep 16
Triniti Caring Ransomware Claim by safepay (Sep 2026)
low Sep 15
Aforpa Ransomware Claim by thegentlemen (Sep 2026)
low Sep 15
Honda Peru Ransomware Claim by Panzer (Sep 2026)
critical Sep 15
Insight Credit Union Ransomware Claim by Storm (Sep 2026)
critical Sep 15
PANTHERx Rare Ransomware Claim by Storm (Sep 2026)
low Sep 15
Rosello et Fils Ransomware Claim by Eclipse (Sep 2026)
critical Sep 14
Agape Health Ransomware Claim by insomnia (Aug 2026)
low Sep 14
Alicotrans Ransomware Claim by Qilin - Sept 2026
low Sep 14
Comune di Robecco sul Naviglio Ransomware Claim by LockBit5 (Sep 2026)
critical Sep 14
Imperial Healthcare Solutions Ransomware Claim by Qilin (Sep 2026)
low Sep 14
Navitrans Ransomware Claim by emperador (Sep 2026)
low Sep 13
CARIDRO VAL DE LOIRE Ransomware Claim by Qilin (Sep 2026)
low Sep 13
Egyptian Airports Co Ransomware Claim by krybit (Sep 2026)
low Sep 13
Kimberly-Clark Ransomware Claim by ShinyHunters (Sep 2026)
low Sep 13
Sutton Public Schools Ransomware Claim by global (Sep 2026)
low Sep 13
vi***in Ransomware Claim by AuditTeam (Sep 2026)
low Sep 12
Capricorn Logistics Ransomware Claim by Krybit (Sep 2026)
low Sep 12
ERACM Ransomware Claim by krybit - Sept 2026
critical Sep 12
Ibn Sina Trust Ransomware Claim by krybit (Sep 2026)
low Sep 12
Tender.mx Ransomware Claim by krybit (Sep 2026)
low Sep 12
Town of Sutton Ransomware Claim by global (Sep 2026)
low Sep 11
AEMET Ransomware Claim by Panzer - Sept 2026
low Sep 11
Air Canada Ransomware Claim by thegentlemen (Sep 2026)
critical Sep 11
AmorSaúde Ransomware Claim by LockBit5 (Sep 2026)
low Sep 11
California School Employees Association Hit by ransomhouse - Aug 2026
critical Sep 11
CO-OP URBAN BANK Ransomware Claim by Global Secret Group (Sep 2026)
critical Sep 11
Financière d'Uzès Ransomware Claim by Panzer (Sep 2026)
critical Sep 11
General Santos Doctors Hospital Ransomware Claim by Rhysida (Sep 2026)
low Sep 11
Goldston Oil Ransomware Claim by Wallstreet (Sep 2026)
critical Sep 11
Mankato Clinic Ransomware Claim by chaos (Sep 2026)
low Sep 11
Metro Ransomware Claim by thegentlemen (Sept 2026)
critical Sep 11
On Demand Occupational Medicine Hit by Wallstreet - Sept 2026
critical Sep 11
PharmaEssentia Ransomware Claim by thegentlemen (Sep 2026)
critical Sep 11
RelyComply Ransomware Claim by direwolf (Sep 2026)
low Sep 11
SAD'S Interim Ransomware Claim by Rhysida (Sep 2026)
low Sep 11
University of San Francisco Ransomware Claim by thegentlemen (Sep 2026)
Learn
(2)Malware
(10) Sep 27
AsyncRAT Malware: 26 Samples, Declining Trend (Sep 2026)
Sep 27
QuasarRAT Malware: 13 Samples, Rising Trend (Sep 2026)
Sep 27
Vidar Malware: 77 Samples, Stable Trend (Sep 2026)
Sep 20
AsyncRAT Malware: 12 Samples, Declining Trend (Sep 2026)
Sep 20
Cobalt Strike Malware: 6 Samples, Rising Trend (Sep 2026)
Sep 20
Vidar Malware: 68 Samples, Stable Trend (Sep 2026)
Sep 13
AsyncRAT Malware: 67 Samples, Rising Trend (Sep 2026)
Sep 13
QuasarRAT Malware: 7 Samples, Rising Trend (Sep 2026)
Sep 13
Snake Keylogger Malware: 4 Samples, Rising Trend (Sep 2026)
Sep 13