2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P20
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,418 matching records.
AUTO-POLL // 2026-10-02 22:45 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P6 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 2
RANSOMWARE
P6
COOL // 45 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
WED
Sep 30
RANSOMWARE
P10
WARM // 59 ARTICLES
TUE
Sep 29
RANSOMWARE
P4
COOL // 68 ARTICLES
MON
Sep 28
RANSOMWARE
P7
COOL // 52 ARTICLES
SUN
Sep 27
RANSOMWARE
P25
ELEVATED // 15 ARTICLES
SAT
Sep 26
RANSOMWARE
P13
WARM // 20 ARTICLES
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P0
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P10
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P0
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P15
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P0
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P0
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P0
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:21 UTC
Vendor Research
Vendor Research
P5
2026-09-30 19:00 UTC
Security Journalism
Security Journalism
Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation
Vulnerability disclosures continue to skyrocket, doubling over the course of the year to more than 10,000 each month, Google researchers warned.
P0
2026-09-30 18:56 UTC
Security Journalism
Security Journalism
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.
P0
2026-09-30 18:08 UTC
Security Journalism
Security Journalism
Over 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data. [...]
P0
2026-09-30 17:30 UTC
Security Journalism
Security Journalism
Defender Exclusion Abuse: How Attackers Hide Malware from MDAV
See how attackers like GootKit and WhisperGate abuse Windows Defender exclusions to hide malware from AV scans — and how Huntress detects it.
P0
2026-09-30 16:46 UTC
Security Journalism
Security Journalism
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management Protocol
P20
2026-09-30 16:32 UTC
Security Journalism
Security Journalism
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360 installer, distributed under a deceptive file name established remote management access on affected
P0
2026-09-30 16:00 UTC
Vendor Research
Vendor Research
Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
On October 7, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Application Policy Infrastructure Controller (security hardening release) Finesse License On-Prem, formerly Cisco Smart Software Manager On-Prem (security hardening release) Meraki (security hardening release) NX-OS Software for MDS 9000, Nexus 3000, 7000, and 9000 Series Switches…
P0
2026-09-30 15:49 UTC
Security Journalism
Security Journalism
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. [...]
P25
2026-09-30 15:24 UTC
Security Journalism
Security Journalism
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. It carries a
P40
2026-09-30 15:09 UTC
Vendor Research
Vendor Research
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding (CWE-177). An unauthenticated, remote attacker can send a crafted HTTP request that bypasses an authentication rule for a specific API endpoint, gaining access to the API with the privileges of the admin user.According to C…
P90
2026-09-30 15:02 UTC
Security Journalism
Security Journalism
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.
P0
2026-09-30 15:00 UTC
Security Journalism
Security Journalism
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have weaponized shared
P0