Vol. 1 · No. 001Week of September 21, 2026
Threat Brief/ The Wire
Sorted automatically. Filtered by you.
Refreshed 07:15 UTC
From this link

Actively exploited

Actively exploited · Last 14 days

RSS
Customize1

Stack

Identity & cloud
Network edge
Endpoints
Web & code
Campus systems
Research AI

Topics

Sources

Show
Window
Order
Reset
CampusHeadlineSourceAgeCVEBrief
MED More RMM Tools In the Wild, (Tue, Oct 6th) Exploited SANS ISC 18h —
MED Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. Exploited Security Affairs 37h CVE-2026-61500
HIGH ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests Exploited The Hacker News 41h —
HIGH Citrix NetScaler Targeted Via New Zero Day Exploited Infosecurity Magazine 42h —
HIGH U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog Exploited Security Affairs 42h CVE-2026-88779
HIGH New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline Exploited The Hacker News 2d CVE-2026-88779
MED Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes Exploited The Hacker News 5d CVE-2026-63688
HIGH Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response Exploited Dark Reading 5d —
MED Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure Exploited Infosecurity Magazine 5d —
HIGH Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes Exploited The Hacker News 5d CVE-2026-104286
MED ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories Exploited The Hacker News 6d —
HIGH Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation Exploited Infosecurity Magazine 6d —
HIGH CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV Exploited The Hacker News 6d CVE-2026-76504
HIGH Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Exploited The Hacker News 6d —
MED MetaMask Security Incident Prompts Exit of Affected Ethereum Validators Exploited The Hacker News 6d —
MED Apple Patches CoreGraphics Zero Day Exploited in Attacks Exploited Infosecurity Magazine 7d CVE-2026-86950
MED Apple Zero-Day Vulnerability Weaponized in Targeted Attacks Exploited Dark Reading 7d CVE-2026-86950
HIGH Citrix Patches Critical Zero Days Under Active Exploitation Exploited Infosecurity Magazine 9d —

Showing 18 of 18 matching stories (160 in the last 14 days from 54 sources). Relevance and tags come from fixed keyword rules. Exploit data: CISA Known Exploited Vulnerabilities (CC0) and EPSS by FIRST (first.org/epss).

Running on the core news feeds only. Bind the WIRE KV namespace and the cron trigger to turn on all sources and exploit data.