60
60
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls
60
60
60
60
60
60
Patch Tuesday - September 2026
Microsoft's September 2026 Patch Tuesday fixes 999 CVEs, a record, with two zero-day privilege escalation flaws already exploited in the wild.
Microsoft published 974 own-product vulnerabilities plus 25 non-Microsoft CVEs, totaling 999 — the most CVEs Microsoft has ever released in a single day. Two flaws are exploited in the wild: CVE-2026-85880, an out-of-bounds write in Windows ALPC granting SYSTEM privileges, and CVE-2026-81963, an improper link resolution flaw in the Windows Update Stack also leading to SYSTEM. Chrome's V8 zero-day CVE-2026-85046 was patched in Edge on September 2, but Microsoft had not published a corresponding advisory, leaving uncertainty about other Chromium fixes in Edge. October 14 lifecycle changes end servicing for Windows 11 24H2 Home/Pro, Office 2021, and Exchange Server 2016/2019.
88
57
60
60
60
Cisco SD-WAN Has a New Root-Level Problem, and There's No Fix Yet
60
60
60
60
60
Cisco Catalyst SD-WAN Manager CVE-2026
60
60
60
Microsoft Patch Tuesday
60
60
60
Microsoft Issues Patches for 121 Flaws, Including Zero
60
60
October Patch Tuesday: Changes, urgent updates and what's coming next
60
60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
60
60
60
Vulnerability Exploitation on the Rise as Attackers Ditch Phishing
60
60
60
60
60
Microsoft Issues Security Patch Update for 14 New Critical Vulnerabilities
60
Fake GTA 6 download delivers malware-packed bundle to impatient gamers
Huntress found malware disguised as a leaked GTA 6 download bundling NJRAT, DCRAT, an infostealer, and Chaos ransomware used as a wiper.
Huntress analyzed a fake Grand Theft Auto VI ISO whose gta6installer.exe displays a fake 'License not found' error while silently installing payloads. The bundle includes NJRAT and DCRAT remote access trojans, the Mercurial Grabber infostealer, and a Chaos ransomware variant used destructively as a wiper, plus a Yandex Browser drop. The Chaos variant encrypts files up to 200MB, overwrites larger ones, deletes shadow copies, and disables recovery, with no ransom actually demanded. Most components are old malware dating to 2023 and are detected by up-to-date Windows Defender.
45
60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast
60