RansomwareSettra ransomware group uses MeshAgent RMM in recent attacksLaura FrenchSeptember 18, 2026The nascent threat actor has claimed 93 victims since June 2026.
Vulnerability ManagementCisco patches 10.0 ISE bug exploited in the wildSteve ZurierSeptember 17, 2026Actively exploited Cisco ISE flaw could give attackers a path to expand network access.
Network SecurityFlaws in The Events Calendar WordPress plugin enable unauthenticated RCELaura FrenchSeptember 17, 2026Both flaws can be exploited by leaving an anonymous comment on an event page.
Vulnerability ManagementConnectWise ScreenConnect bug exploited in the wild, CISA saysSteve ZurierSeptember 16, 2026Experts warn teams to patch right away to prevent a potential ransomware incident.
Threat IntelligenceHBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacksLaura FrenchSeptember 16, 2026Malicious Reddit advertisements led to macOS and Windows infostealer downloads.
RansomwarePatched VMware vCenter bug targeted in ransomware campaignsSteve ZurierSeptember 15, 2026Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.
PhishingMicrosoft warns of cloud storage attacks, financial fraud scams targeting customersLaura FrenchSeptember 15, 2026Both campaigns use social engineering to access accounts or secure fraudulent transactions.
AI/MLTrump pushes back on Anthropic CEO’s call for an AI slowdownSteve ZurierSeptember 14, 2026Trump rejects calls to slow frontier AI as security experts debate the risks and need for guardrails.
Vulnerability ManagementMax severity GitLab path traversal flaw under active reconnaissanceLaura FrenchSeptember 11, 2026The flaw could enable sensitive files to be read with just an HTTP request.
Vulnerability ManagementCheck Point patches two critical VPN gateway bugsSteve ZurierSeptember 11, 2026Check Point fixed two 9.8-severity VPN flaws before any known exploitation in the wild.
What the FBI’s new offensive cyber strategy means to the private sectorJames Turgal September 17, 2026
Hastily deployed agentic security is not the answer to enterprise cyber threatsLee Rossey September 16, 2026
