Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero‑days
Microsoft released the largest security update ever, patching 966 vulnerabilities—including two actively exploited zero‑days—using an AI‑powered discovery system.
Stay informed with analysis and news on cybersecurity, covering threats, defenses, policy and emerging technologies.
74 stories
Microsoft released the largest security update ever, patching 966 vulnerabilities—including two actively exploited zero‑days—using an AI‑powered discovery system.
A white‑hat hacker stole thousands of bitcoins worth about $340 million from the Liquid Network, then returned most of the funds after the bug was fixed.
AIR emerged from stealth with $50 million in funding to build an inline firewall that protects AI agents from malicious content, compromised tools, and untrusted data sources.
JetBrains warns users to revoke credentials after attackers exploited a critical TeamCity vulnerability (CVE‑2026‑63077) to access Cadence cloud data, including backups and user information.
OpenAI’s chief scientist outlined how the company uses AI agents to speed research while calling for voluntary slowdowns to address safety risks.
CERT Polska revealed a chain of RouterOS vulnerabilities that allow attackers to take full control of MikroTik devices with SSH exposed to the internet, prompting urgent patches.
Security researchers detail 39 publicly documented attack vectors against passkey authentication, underscoring that the threat model now extends beyond cryptography to the surrounding ecosystem.
Prominent U.S. law firms suffered data breaches, exposing sensitive client information amid heightened cyber risks for firms handling confidential data.
Thegentlemen ransomware gang announced it had compromised Veradigm, targeting the healthcare data analytics firm and exposing millions of patient records.
A single directory traversal bug in VMware vCenter Server has turned into one of the broadest hypervisor‑level ransomware campaigns of 2026, affecting 361 victim IP addresses across 47 countries.
A hacker group called Rhysida released nearly six terabytes of Berlin state‑administration data, including personal and defense‑related information, to the dark web.
An anonymous researcher disclosed a zero‑day exploit named FalconFlank that lets attackers gain SYSTEM privileges on Windows systems using CrowdStrike Falcon, prompting a security alert from the vendor.
A unit of Thomson Reuters identified a cyber incident affecting its C‑Track platform, with unauthorized access to court records in multiple U.S. states and Canada.
Craneware, a UK‑based healthcare billing software maker, suffered a data breach that exposed customer and employee data used by hospitals and pharmacies across the US.