Breach Intelligence (CVE)

CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog across 11 vendors between 07 and 13 September 2026, 8 of them rated CVSS 9.0 or above, and public proof-of-concept code is already published for at least 5, including two flaws disclosed and exploited in the same week. Patch Adobe Commerce and Magento first:… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 07 Sep to 13 Sep 2026

CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog between 31 August and 6 September 2026, split across three batches: two on 31 August, seven on 2 September, one on 4 September. Six of the ten carry a CVSS score of 9.0 or higher, all ten have confirmed in-the-wild exploitation behind their KEV listing,… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 31 Aug to 06 Sep 2026

The week of 31 August to 6 September 2026 was defined by identity and access failures, not exploited software. McKesson confirmed attackers reached patient data after a voice-phishing call compromised an Okta single sign-on session. Berlin’s state government confirmed data theft from a network segment that had no multi-factor authentication on its VPN. A Thomson… Read More »Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 31 Aug to 6 Sep 2026

CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog between 17 and 23 August 2026, across five separate batches. Seven of the nine carry CVSS scores of 9.0 or above, all nine have confirmed in-the-wild exploitation, and one, the Microsoft SharePoint flaw CVE-2026-55040, was exploited within days of a public proof of concept. Patch… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 17 Aug to 23 Aug 2026

The week of 17 to 23 August 2026 was defined by stolen and sprayed credentials doing the work that malware used to do. France’s tax authority DGFiP confirmed that attackers used compromised access points to extract data on 678,000 individuals. A threat actor calling themselves TheHatman put 3.64 million employee records from Fortune 500 Azure… Read More »Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 17 Aug to 23 Aug 2026