Vol. 1 · No. 001Week of September 21, 2026
Threat Brief/ The Wire
Sorted automatically. Filtered by you.
Refreshed 05:58 UTC
Default view

Campus-relevant

Campus-relevant · Last 14 days

RSS
Customize

Stack

Identity & cloud
Network edge
Endpoints
Web & code
Campus systems
Research AI

Topics

Sources

Show
Window
Order
Reset
CampusHeadlineSourceAgeCVEBrief
HIGH Even with OT network visibility, critical infrastructure operators struggle with legacy equipment Help Net Security 1h —
MED Critical Healthcare Systems Aren't Quantum-Ready Dark Reading 9h —
MED Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes The Hacker News 11h —
HIGH Osaka Metropolitan University cancels classes after suspected ransomware attack The Record 15h —
MED CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely Security Affairs 16h CVE-2026-96940
MED Nikkei Discloses Two Employee Cloud Account Compromises Infosecurity Magazine 16h —
MED More RMM Tools In the Wild, (Tue, Oct 6th) Exploited SANS ISC 17h —
MED Critical Medical Devices Unable to Support PQC Transition Infosecurity Magazine 18h —
MED Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks SecurityWeek 18h —
MED Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers The Hacker News 19h —
MED Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 SecurityWeek 19h —
MED Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds Infosecurity Magazine 21h —
MED Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access Security Affairs 23h CVE-2026-86360
MED Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products The Hacker News 23h CVE-2026-21589
MED ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure Security Affairs 23h —
MED ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits The Hacker News 25h —
MED Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. Exploited Security Affairs 36h CVE-2026-61500
MED Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes The Hacker News 38h CVE-2026-96940
HIGH Chinese Hackers Impersonate US Officials for AI Cyber Espionage Dark Reading 38h —
HIGH ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests Exploited The Hacker News 40h —
HIGH Citrix NetScaler Targeted Via New Zero Day Exploited Infosecurity Magazine 40h —
HIGH U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog Exploited Security Affairs 41h CVE-2026-88779
MED Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 The Hacker News 42h —
MED Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access The Hacker News 43h —
MED MI5 Raises Alarm Over Chinese Funding of UK Academic Research Security Affairs 45h —
HIGH Frontline Education Breach Impacts K-12 School District Staff Infosecurity Magazine 45h —
HIGH Iranian hacker accused of draining 31TB from university inboxes extradited to the US Security Affairs 45h —
MED Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE The Hacker News 46h CVE-2026-61500
HIGH New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline Exploited The Hacker News 47h CVE-2026-88779
HIGH China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing The Hacker News 3d —
HIGH Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware The Hacker News 4d —
HIGH GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers The Hacker News 5d —
MED Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign The Hacker News 5d —
MED Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes Exploited The Hacker News 5d CVE-2026-63688
HIGH Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response Exploited Dark Reading 5d —
MED SWIFT Banking & Government Middleware Enables RCE Dark Reading 5d —
MED Police Target KillSec Ransomware Group with Arrests and Seizures Infosecurity Magazine 5d —
MED Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure Exploited Infosecurity Magazine 5d —
HIGH Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes Exploited The Hacker News 5d CVE-2026-104286
MED Alleged KillSec Ransomware Mastermind a 16-Year-Old Dark Reading 5d —
MED Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers The Hacker News 6d —
MED ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories Exploited The Hacker News 6d —
MED WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory The Hacker News 6d —
HIGH Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation Exploited Infosecurity Magazine 6d —
MED China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders Infosecurity Magazine 6d —
MED CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer Infosecurity Magazine 6d —
MED Warlock Ransomware Hits Large Spanish, Portuguese Orgs Dark Reading 6d —
HIGH CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV Exploited The Hacker News 6d CVE-2026-76504
HIGH Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Exploited The Hacker News 6d —
MED MetaMask Security Incident Prompts Exit of Affected Ethereum Validators Exploited The Hacker News 6d —
HIGH Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs The Hacker News 6d —
MED Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net Dark Reading 7d —
MED AI-Found Vulnerabilities More Likely to Enable RCE, Google Says Infosecurity Magazine 7d —
MED Apple Patches CoreGraphics Zero Day Exploited in Attacks Exploited Infosecurity Magazine 7d CVE-2026-86950
MED South Africa Seeks Help After Cyberattack Targets Air Traffic Control Dark Reading 7d —
MED Apple Zero-Day Vulnerability Weaponized in Targeted Attacks Exploited Dark Reading 7d CVE-2026-86950
HIGH 'NeedyMantis' Provides Long-Term Access to Compromised Networks Dark Reading 8d —
HIGH Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers Dark Reading 8d —
MED Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials Infosecurity Magazine 8d —
MED Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions Dark Reading 9d —
MED Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Krebs on Security 9d —
HIGH Citrix Patches Critical Zero Days Under Active Exploitation Exploited Infosecurity Magazine 9d —
MED Researchers Identify AliExpress Phishing Domains Before Registration Infosecurity Magazine 12d —
MED 'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing Dark Reading 12d —

Showing 64 of 64 matching stories (162 in the last 14 days from 54 sources). Relevance and tags come from fixed keyword rules. Exploit data: CISA Known Exploited Vulnerabilities (CC0) and EPSS by FIRST (first.org/epss).

Running on the core news feeds only. Bind the WIRE KV namespace and the cron trigger to turn on all sources and exploit data.