Cyber Security News

Microsoft's September Patch Tuesday fixes nearly 1,000 vulnerabilities; CISA warns two of the flaws are being actively exploited.

Microsoft's September 2026 Patch Tuesday release addresses close to 1,000 vulnerabilities, with CISA warning that two of the bugs are being actively exploited. The Record's homepage digest also lists briefs including a US offer of $10 million for information on an Iranian hacker accused of attacking critical infrastructure and a leak of health data on more than 9.5 million people from the Aesto record system. Additional briefs cover a Russian suspect's extradition to the US for bank account takeovers, US-British coordination on scam center takedowns, G7 guidance on quantum cyber threats, a large DDoS attack on Norwegian public services, and Slovenian casinos reopening after a cyberattack.

• Nearly 1,000 Microsoft bugs patched; two actively exploited per CISA
• US offers $10 million reward for Iranian hacker targeting critical infrastructure
• Health data of 9.5 million people leaked from Aesto record system
• Large DDoS attack knocked Norwegian public services offline
• G7 urges organizations to prepare for quantum cyber threats