Vol. 1 · No. 001Week of September 21, 2026
Threat Brief/ The Wire
Sorted automatically. Filtered by you.
Refreshed 04:16 UTC
From this link

Everything

Everything · Last 14 days

RSS
Customize1

Stack

Identity & cloud
Network edge
Endpoints
Web & code
Campus systems
Research AI

Topics

Sources

Show
Window
Order
Reset
CampusHeadlineSourceAgeCVEBrief
LOW New infosec products of the week: October 16, 2026 Help Net Security 17m —
MED Fastfetch 2.70.0 changes how Disk free space is reported Help Net Security 24m —
LOW Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) SANS ISC 4h —
LOW Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) SANS ISC 5h —
MED SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape Dark Reading 6h —
LOW F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud Dark Reading 6h —
LOW Federal bankruptcy courts dealing with outages after contractor cyberattack The Record 8h —
LOW AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too Dark Reading 8h —
MED Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory The Hacker News 8h CVE-2026-99999
HIGH U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog Exploited Security Affairs 9h —
LOW Zero-click spyware infecting devices through online ads, researchers say The Record 9h —
MED ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More The Hacker News 9h —
MED Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government Security Affairs 10h —
LOW Context Is King in the Fight Against Modern Cyberattacks SecurityWeek 11h —
LOW Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand SecurityWeek 11h —
LOW Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads The Hacker News 12h —
LOW Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks The Hacker News 12h —
LOW Vulnerability Management Isn't About the Score — It's About How It Applies to You Dark Reading 13h —
LOW UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978 The Record 14h —
LOW UK Legal Aid Agency Hack Scope Widens After Forensic Review SecurityWeek 14h —
LOW AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks Security Affairs 14h —
LOW Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams The Hacker News 14h —
LOW Suspected Kazakhstan-linked hackers target governments across former Soviet states The Record 14h —
LOW ServiceNow gives AI agents a passport, and limits on what they can do Help Net Security 14h —
MED KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims Help Net Security 14h —
LOW France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack Infosecurity Magazine 15h —
MED Fake CAPTCHAs are tricking users into running malware on their own devices Help Net Security 15h —
LOW New Aoki Infostealer Targets AI Coding Assistant Credentials Infosecurity Magazine 15h —
HIGH NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks The Hacker News 15h —
LOW Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers SecurityWeek 15h —
MED Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing The Hacker News 16h —
HIGH Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules The Hacker News 16h —
LOW Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early The Hacker News 17h —
HIGH Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation The Hacker News 17h CVE-2026-0322
MED Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool Infosecurity Magazine 17h CVE-2026-35029 +1
MED CikaBika Bot RAT Uses Discord for C&C SecurityWeek 17h —
LOW Why AI Confidence Is Not Validation The Hacker News 17h —
HIGH CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Exploited Help Net Security 18h CVE-2026-0322 +3
LOW India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1 The Hacker News 18h —
LOW Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies SecurityWeek 18h —
MED Microsoft disrupts phishing network behind more than a billion scam messages Help Net Security 18h —
MED Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages Infosecurity Magazine 18h —
LOW CenterPoint Energy Data Breach Impacts 1 Million Texans SecurityWeek 18h —
HIGH Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise Security Affairs 19h CVE-2026-76519
LOW GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories The Hacker News 20h —
LOW ICO Reprimands Met Over Third-Party Data Leak Infosecurity Magazine 20h —
LOW CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO SecurityWeek 20h —
LOW Optro automates GRC workflows with auditable AI agents Help Net Security 21h —
LOW Qualys introduces TruConfidence to orchestrate cyber risk remediation Help Net Security 21h —
MED Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts The Hacker News 21h CVE-2026-105740
LOW EU Grocers Pay a Steep Price for Unpatched Fridge Firmware Dark Reading 21h —
HIGH Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Exploited SecurityWeek 21h —
MED AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches Exploited The Hacker News 22h CVE-2026-105133 +1
HIGH Cisco Warns of Exploited Secure Email Gateway Vulnerability Exploited SecurityWeek 22h —
LOW Hirudo Android Trojan Replaces Banking Apps to Steal Credentials Security Affairs 22h —
MED Immuta CISO predicts critical AI incidents at major enterprises within 18 months Help Net Security 23h —
LOW Ukraine says Elon Musk's Starshield service partially restored after restrictions disrupted drone missions The Record 29h —
HIGH Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles Exploited Dark Reading 31h CVE-2026-104935
HIGH U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog Exploited Security Affairs 31h CVE-2026-96951
MED Yam Store: The Phishing Network Behind a Billion Messages Dark Reading 31h —
LOW Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat Dark Reading 32h —
HIGH Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability The Hacker News 34h —
MED Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App Exploited The Hacker News 35h —
MED Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages The Hacker News 35h —
LOW U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud The Hacker News 36h —
MED U.K. Sanctions Cryptomus for RU Money Laundering Krebs on Security 38h —
MED Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates Exploited Security Affairs 38h —
LOW ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads Infosecurity Magazine 38h —
LOW Russian Influence Operation Widely Targets Latin America Dark Reading 39h —
HIGH CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts Exploited The Hacker News 40h CVE-2026-104935
LOW curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution The Hacker News 40h —
LOW How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team The Hacker News 40h —
LOW Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges Security Affairs 41h —
MED Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days The Hacker News 41h —
LOW Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks The Hacker News 41h —
MED An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part. The Hacker News 41h —
HIGH Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities Exploited Security Affairs 42h —
LOW Passkey Authentications Double but Adoption Remains Slow Infosecurity Magazine 42h —
LOW French Supermarket Cyber-Attack Impacts More Refrigeration Controllers Infosecurity Magazine 43h —
LOW Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs Infosecurity Magazine 44h —
MED Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched Infosecurity Magazine 44h —
LOW AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host The Hacker News 45h CVE-2026-74580
LOW Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th) SANS ISC 45h —
MED Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave The Hacker News 46h —
MED How a leaked builder of XWorm turned a remote access trojan into a surveillance kit Exploited Security Affairs 47h —
MED Ransomware Gangs Embrace Physical Threats, Family Stalking? Dark Reading 47h —
HIGH Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Exploited The Hacker News 2d —
LOW OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room The Hacker News 2d —
MED Microsoft Patches More Than 1,400 Security Flaws Krebs on Security 2d —
MED Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday Dark Reading 2d —
MED North Korea Phishes Ukrainians for War Intel Dark Reading 2d —
LOW Anthropic Finds Ingredients for Future AI Worms Dark Reading 2d —
MED October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th) Exploited SANS ISC 2d —
LOW Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets The Hacker News 2d —
MED Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another The Hacker News 2d —
HIGH Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far Exploited The Hacker News 2d —
MED SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft The Hacker News 2d —
LOW GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking The Hacker News 3d —
LOW European Retail Firms Confirm Cyber Incidents Infosecurity Magazine 3d —
MED Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool Exploited Infosecurity Magazine 3d —
LOW Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation The Hacker News 3d —
LOW [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls The Hacker News 3d —
LOW LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network The Hacker News 3d —
LOW Product Walkthrough: Bitdefender AI Visibility and Control The Hacker News 3d —
LOW UK Government Announces Sweeping New AI Security Plans Infosecurity Magazine 3d —
LOW Fifth of CISOs Take Time Off to Avoid Patch Tuesday Infosecurity Magazine 3d —
LOW Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers The Hacker News 3d —
MED Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control The Hacker News 3d —
HIGH Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack Exploited Dark Reading 3d —
MED Prominent Ransomware Negotiator Faces Extortion Charges Dark Reading 3d —
LOW No Identity, No Recovery: Cyber Resilience Starts With IAM Dark Reading 3d —
MED Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings Infosecurity Magazine 4d —
LOW Passing the Baton: Dark Reading Names New Editor-in-Chief Dark Reading 4d —
LOW Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted Infosecurity Magazine 4d —
LOW Net Closes Around ShinyHunters with Another FBI Arrest Infosecurity Magazine 4d —
HIGH Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups Exploited Infosecurity Magazine 4d —
LOW Karaoke Giant Reveals Data Breach Impacting Eight Million Infosecurity Magazine 4d —
LOW Why TLP should not replace your internal information classification, (Sat, Oct 10th) SANS ISC 6d —
MED FBI Arrests Executive at Ransomware Negotiation Firm Krebs on Security 6d —
LOW ASOS Breach Reveals the Risks in Customer-Facing SaaS Dark Reading 6d —
LOW AI Scramble Drives Cybersecurity M&A Boom Dark Reading 6d —
LOW What We Missed: FBI Strikes Back at ShinyHunters Dark Reading 6d —
LOW Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too Dark Reading 7d —
LOW Wikimedia Says Rogue AI Agents Abused its Platforms Infosecurity Magazine 7d —
LOW Social Engineering AI Agents: The New BEC for 2026 Dark Reading 7d —
HIGH Q3 2026 Sets New Record for Ransomware Attacks Infosecurity Magazine 7d —
LOW UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group Infosecurity Magazine 7d —
MED AI Training Critical as Governance Challenges Grow Infosecurity Magazine 7d —
LOW Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push Infosecurity Magazine 7d —
LOW 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt Dark Reading 7d —
LOW Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting Dark Reading 7d —
LOW Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift Dark Reading 7d —
LOW Attackers Hijack Three ccTLDs to Obtain Google Certificates Infosecurity Magazine 8d —
LOW ASOS Confirms Data Breach Linked to Stolen Employee Credentials Infosecurity Magazine 8d —
LOW Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware Infosecurity Magazine 8d —
LOW Writing the Next Chapter Dark Reading 8d —
LOW Chinese Hacker Deployed AI in Campaign Against South Korean Banks Infosecurity Magazine 8d —
MED Critical Flaw in Multiple Atlassian Products Exploited in the Wild Exploited Infosecurity Magazine 8d —
LOW Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats Infosecurity Magazine 8d —
MED FBI and Secret Service Warn of FortiBleed Lockout Threat Infosecurity Magazine 8d —
LOW Australian Gov't Weighs Mandatory AI Incident Reporting Dark Reading 8d —
LOW Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives Dark Reading 8d —
LOW Anthropic Gives Vetted Defenders Fewer Claude Guardrails Dark Reading 8d —
LOW OpenAI Agent Escape Causes Wikimedia Service Outage Dark Reading 8d —
LOW OT Coalition Urges CISA to Mandate Federal OT Security Infosecurity Magazine 9d —
LOW ShinyHunters Extorted Boeing Spin-off Prior to Arrests Krebs on Security 9d —
MED Attackers Hide AI Prompt Injections Inside Phishing Emails Infosecurity Magazine 9d —
LOW Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading Infosecurity Magazine 9d —
LOW Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns Infosecurity Magazine 9d —
MED Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One Exploited Infosecurity Magazine 9d —

Showing 150 of 164 matching stories (164 in the last 14 days from 54 sources). Relevance and tags come from fixed keyword rules. Exploit data: CISA Known Exploited Vulnerabilities (CC0) and EPSS by FIRST (first.org/epss).

Running on the core news feeds only. Bind the WIRE KV namespace and the cron trigger to turn on all sources and exploit data.