60
Adobe Patch Tuesday fixed critical vulnerabilities in Magento, Acrobat and Reader
60
60
Network Security Trends: August
60
60
30
60
30
35
60
60
60
June 2020 Patch Tuesday: Microsoft fixes record monthly number of CVEs
60
55
Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities
60
60
60
60
Windows BitLocker Flaw Lets Attackers Execute Code on Vulnerable Systems
Microsoft patched CVE-2026-69449, a heap-based buffer overflow in Windows BitLocker allowing privileged local attackers to execute code; no exploitation reported.
Microsoft disclosed CVE-2026-69449 on September 8, 2026, an Important-severity heap-based buffer overflow (CWE-122) in Windows BitLocker with a CVSS 3.1 base score of 6.7. The attack vector is local (AV:L) with high privileges required, so exploitation needs privileged local access rather than remote access over the internet. Microsoft, as assigned CNA, has not reported public exploitation, and administrators are urged to inventory BitLocker-enabled systems and apply updates. Interim mitigations include least-privilege access, limiting administrative rights, and monitoring for unexpected elevated process activity.
40
60
60
47
60
60
60
60
35
CISA adds 15 new flaws to its Known Exploited Vulnerabilities Catalog
60
Trend Micro fixed a remote code execution in Apex Central
60
60
47
30
60
47
Microsoft Patch Tuesday security updates for August 2024 six actively exploited bugs
60
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
60
Hackers Actively Searching for Unpatched Microsoft Exchange Servers
60
Hackers target Windows users exploiting a Zero
60
60
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
GBHackers weekly digest rounds up 50 stories including Microsoft's 973-CVE patch drop, exploited Cisco FMC flaws, and Claude agent attacks.
GBHackers' September 7-12, 2026 newsletter summarizes the 50 biggest cybersecurity stories of the week. Highlights include Microsoft patching a record 973 CVEs with two exploited zero-days, active exploitation of Cisco FMC, Check Point VPN and Ivanti flaws, China-linked crews chaining Chrome and Windows zero-days, AI agents mass-exploiting PaperCut to compromise 440 servers, and the emergence of Panzer cross-platform ransomware. It also covers Anthropic and OpenAI agentic AI incidents and CrowdStrike's SafeMind launch.
15