21 to 27 September 2026

The biggest stories

1. Medium.

   Microsoft: 45 security advisories this week

   Microsoft MSRC · 2026-09-25

2. Medium. Exploit

   'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

   Dark Reading · 2026-09-24

3. Medium. Ransomware

   3 Cyber Threats That Defined the Summer of 2026

   Dark Reading · 2026-09-24

4. Medium. Data theft

   Ghost Service Accounts Enable M365 Data Theft in Chile

   Dark Reading · 2026-09-24

5. Medium. Supply-chain attack

   GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

   Dark Reading · 2026-09-23

6. Low.

   U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

   Krebs on Security · 2026-09-25

7. Low.

   Why the CISO-CFO Relationship Is a Key to Cybersecurity Success

   Dark Reading · 2026-09-25

8. Low.

   AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

   Dark Reading · 2026-09-25

New on CISA's exploited list

• Citrix NetScaler Improper Input Validation Vulnerability

  CVE-2026-88771 · added 2026-09-27 · chance of use 82%

• Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

  CVE-2026-88772 · added 2026-09-27 · chance of use 78%

• Microsoft SharePoint Code Injection Vulnerability

  CVE-2026-65660 · added 2026-09-25 · chance of use 8.2%

• Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

  CVE-2026-67279 · added 2026-09-25 · chance of use 2.3%

• WordPress Core Remote File Inclusion Vulnerability

  CVE-2026-87902 · added 2026-09-25 · chance of use 96%

• WSO2 Multiple Products Path Traversal Vulnerability

  CVE-2026-5430 · added 2026-09-24 · chance of use 22%

• Adobe Commerce and Magento Incorrect Authorization Vulnerability

  CVE-2026-71362 · added 2026-09-24 · chance of use 90%

• Check Point Multiple Products Improper Certificate Validation Vulnerability

  CVE-2026-85102 · added 2026-09-22 · chance of use 54%

• Check Point Multiple Products Path Traversal Vulnerability

  CVE-2026-93616 · added 2026-09-22 · chance of use 92%

• Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

  CVE-2026-93952 · added 2026-09-22 · chance of use 1.4%

• F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

  CVE-2026-94127 · added 2026-09-22 · chance of use 25%

• Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

  CVE-2026-7273 · added 2026-09-21 · chance of use 2.8%

Every week

• 26 October to 1 November 2026 (so far)
• 19 to 25 October 2026
• 12 to 18 October 2026
• 5 to 11 October 2026
• 28 September to 4 October 2026
• 21 to 27 September 2026