Weekly digest · week 40
28 September to 4 October 2026
9 Major stories, 6 flaws added to CISA's exploited list and 0 breached listed companies. Busiest countries: Spain and United States.
No comparisons this week: SentryFeed only collected part of the week before.
- Major stories
- 9Major stories
- Medium stories
- 52Medium stories
- stories about flaws on CISA's list
- 4stories about flaws on CISA's list
- flaws added to CISA's list
- 6flaws added to CISA's list
- countries named in incidents
- 16countries named in incidents
- breached listed companies
- 0breached listed companies
The biggest stories
Major. CISA says it's being exploited
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Major. CISA says it's being exploited
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
Major. CISA says it's being exploited
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
Major. CISA says it's being exploited
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Major. Rated 10.0 out of 10
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Major. Zero-day
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
Major. Zero-day
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Major. 1 rated Major
Microsoft: 38 security advisories this week
New on CISA's exploited list
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Fortinet FortiMail Path Traversal Vulnerability
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Apple Multiple Products Out-of-Bounds Write Vulnerability
Where it happened
- Spain: 3 stories
- United States: 3 stories
- Portugal: 2 stories
- China: 2 stories
- Cambodia: 1 story
Markets
No breach story named a listed company this week.
In the Gulf
No Gulf stories this week.
Coming up
No events listed for the week after. Submit one.