30
42
30
55
60
55
30
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability
Cisco expanded an SSL VPN denial-of-service advisory to cover all ASA and FTD software platforms; unauthenticated attackers can exhaust device memory.
A vulnerability in the VPN and management web servers of Cisco ASA Software and Cisco Secure FTD Software allows an unauthenticated remote attacker to exhaust system memory or buffer blocks, causing a denial of service. Originally scoped to the ASAv and FTDv virtual appliances, Cisco updated the advisory on September 16, 2026 to cover all ASA and FTD platforms.
45
Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities
Apple released iOS 27 and iPadOS 27 patching roughly 126 vulnerabilities across kernel, WebKit, sandboxing, and authentication components; no active exploitation reported.
Apple released iOS 27 and iPadOS 27 on September 14, 2026, fixing approximately 126 vulnerabilities across more than 90 components, including the kernel, WebKit, AppleKeyStore, Sandbox, and TCC. Flaws include memory corruption, information disclosure, denial-of-service, logic errors, sandbox escapes enabling root privileges, and a Bluetooth issue permitting remote code execution in specific circumstances. Apple also shipped iOS 26.7 and iPadOS 26.7 with over 80 fixes for users delaying the major upgrade, including 75 vulnerabilities shared with iOS 27. No vulnerabilities were reported as actively exploited at release time.
68
30
30
30
55
55
30
42
55
30
42
60
60
Oracle Corporation security advisory (AV26-929)
CCCS relays Oracle's September 2026 Critical Patch Update fixing vulnerabilities across WebLogic, Database, E-Business Suite, PeopleSoft, Siebel, and dozens more products.
The Canadian Centre for Cyber Security (AV26-929) relays Oracle's September 2026 Critical Security Patch Update, which addresses vulnerabilities in dozens of product families as of September 15, 2026. Affected products include Oracle WebLogic Server, Database Server, E-Business Suite, Fusion Middleware, PeopleSoft Enterprise, Siebel Applications, GraalVM, VirtualBox, Coherence, and numerous banking and communications suites. The bulletin lists no CVE identifiers and encourages administrators to review Oracle's advisory and apply patches.
40
CISA Urges Service Providers to Provide Transparent Updates During Major IT and OT Outages
CISA and FBI issued guidance urging service providers to deliver timely, transparent communications during major IT and OT outages.
CISA, with the FBI and international partners, released 'Communicating Under Pressure: Best Practices for Service Providers', urging providers to prepare crisis-communication procedures, provide timely status updates during IT/OT outages, and maintain out-of-band communication channels. The guidance warns that disruptions to telecom, cloud, energy, and water services can cascade across critical infrastructure. It aligns with CISA's CI Fortify initiative supporting IT/OT isolation and recovery.
30
Windows 11 cumulative updates KB5124008 & KB5122880 released
Microsoft shipped mandatory September 2026 Patch Tuesday cumulative updates KB5124008 and KB5122880 for Windows 11, fixing vulnerabilities and adding features.
Microsoft released Windows 11 KB5124008 (versions 25H2/24H2) and KB5122880 (23H2) cumulative updates containing the September 2026 Patch Tuesday security patches, described as covering 1,000 vulnerabilities discovered in previous months. The updates are mandatory and add features including movable and resizable taskbars, Start menu customization, a Windows Search option to hide Bing and Store web suggestions, and Administrator Protection, a just-in-time admin privilege feature that is off by default and configurable via Intune OMA-URI or Group Policy.
38
TeamViewer security advisory (AV26-852)
Canada's Cyber Centre warns that multiple TeamViewer client products are affected by vulnerabilities, urging users to update to 15.64.7 or later.
Advisory AV26-852, dated August 26, 2026, reports vulnerabilities in TeamViewer Full Client, Host, and QuickSupport across multiple versions and platforms, and in Portable prior to 15.64.7. The Canadian Centre for Cyber Security encourages users and administrators to apply the necessary updates, referencing TeamViewer security bulletins TV-2026-1008 and TV-2026-1009. No exploitation details are provided in the advisory.
42
New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims
TCG issued guidance to help businesses verify that trusted platform modules genuinely meet quantum-safe requirements.
The Trusted Computing Group (TCG) published new guidance aimed at proving that trusted platform modules (TPMs) genuinely satisfy essential quantum-safe requirements. The document gives businesses a way to validate vendor claims about post-quantum readiness in hardware security rather than trusting marketing assertions. This is a guidance publication, not an incident or vulnerability disclosure.
25
42
55
60
55
30
30
55
30
55
55
Kaspersky Security Bulletin 2020
60
55
55
57