Vulnerability ManagementMax severity GitLab path traversal flaw under active reconnaissanceLaura FrenchSeptember 11, 2026The flaw could enable sensitive files to be read with just an HTTP request.
Vulnerability ManagementCheck Point patches two critical VPN gateway bugsSteve ZurierSeptember 11, 2026Check Point fixed two 9.8-severity VPN flaws before any known exploitation in the wild.
AI/MLAnthropic finds 4th real-world attack by Claude agent, details models’ ‘biased reasoning’Laura FrenchSeptember 11, 2026Mythos 5 was highlighted as being especially prone to believing the real world was a simulation.
RansomwareCISA: WatchGuard Firebox bug exploited in ransomware campaignsSteve ZurierSeptember 10, 2026Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.
AI/MLPaperCut MF/NG flaws attacked with hundreds of AI agentsLaura FrenchSeptember 10, 2026The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.
Network SecurityF5 BIG-IP malware hides web shells in memory to evade detectionSteve ZurierSeptember 9, 2026Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.
IdentityBigBear 2.0 phishing campaign compromises MFA-protected Microsoft accountsLaura FrenchSeptember 9, 2026Researchers discovered more than 3,300 unique victims across 461 organizations.
Vulnerability ManagementN-able patches critical N-central RCE flaw amid exploit concernsSteve ZurierSeptember 8, 2026N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.
Email securityASCII smuggling challenges email phishing filters, Microsoft warnsLaura FrenchSeptember 4, 2026Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.
Network SecurityHPE patches ArubaOS-CX switches vulnerable to remote code executionSteve ZurierSeptember 4, 2026HPE patched 35 ArubaOS-CX flaws, including a critical bug that could enable remote code execution.
