Priyanka Aash

CISA added at least 11 vulnerabilities to its Known Exploited Vulnerabilities catalog between 21 and 27 September 2026, five of them carrying a CVSS score of 9.0 or higher, and all eleven confirmed under active exploitation at the time of addition. At least three of the week’s flaws had public proof-of-concept detail circulating before vendors… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 21 Sep to 27 Sep 2026

The week of 21 to 27 September 2026 was defined by attackers monetizing access faster than victims could detect it. Bitget lost 351.6 million dollars to a suspected North Korean crew that spoofed its own wallet approvals, ShinyHunters claimed a breach of FBI job applicant data through an unpatched Oracle PeopleSoft zero-day, Gyazo confirmed 23.6… Read More »Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 21 Sep to 27 Sep 2026

The week of 07 to 13 September 2026 was defined by identity compromise, not software exploits. Five incidents drove the week: a Cisco Secure Firewall Management Center authentication bypass under simultaneous nation-state and ransomware exploitation, a confirmed breach at identity-verification vendor IDScan.net exposing more than 150 million driver’s license records, a vendor API credential theft… Read More »Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 07 Sep to 13 Sep 2026

CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog across 11 vendors between 07 and 13 September 2026, 8 of them rated CVSS 9.0 or above, and public proof-of-concept code is already published for at least 5, including two flaws disclosed and exploited in the same week. Patch Adobe Commerce and Magento first:… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 07 Sep to 13 Sep 2026