CISA

Anthropic AI governance and security controversies

231 clusters · 1967 sources · last updated about 21 hours ago

Latest: Anthropic reports AI misuse for missile guidance and naval targeting

In September 2026, internal warnings and threat intelligence reports intensified concerns regarding AI safety and misuse. Researcher Jacob Coxon resigned from Anthropic, alleging that both Anthropic and OpenAI are engage

Browser extension malware and Chrome security overhaul

20 clusters · 91 sources · last updated 1 day ago

Latest: Google Chrome releases urgent security update to patch active exploits

Following the June 2026 discovery of a Turkish-linked malware campaign involving 152 Chrome wallpaper extensions and an emergency patch for a V8 zero-day (CVE-2026-11645), Google began a significant security overhaul. Th

Microsoft Windows 11 Interface, Performance & Recovery Focus

85 clusters · 341 sources · last updated 2 days ago

Latest: Microsoft updates Windows 11 and Edge features

Microsoft is expanding Windows 11 updates to focus on performance, hardware accessibility, and user customization. To support modest hardware, the company is optimizing the OS to run more fluidly on devices with 8 GB of

Phishing and cyber scam escalation

20 clusters · 98 sources · last updated 2 days ago

Latest: Cybersecurity threats evolve through AI automation and browser exploits

The cyber-threat landscape continues to evolve through the integration of artificial intelligence and the exploitation of seasonal digital activity. AI-powered phishing has reportedly increased by 341% over a six-month p

Vulnerabilities in Git-based development platforms

2 clusters · 9 sources · last updated 2 days ago

Latest: GitLab vulnerability exploited shortly after disclosure

Security researchers and government agencies have identified multiple critical vulnerabilities and data exposures within Git-based development environments. In late August, reports emerged regarding the exposure of 28,0

Rising AI-driven threats to OT and critical infrastructure

29 clusters · 74 sources · last updated 3 days ago

Latest: Siemens PLC vulnerabilities and critical infrastructure cyber attacks

Enterprises are increasingly enforcing Zero Trust architectures to mitigate lateral movement and credential-based attacks. Simultaneously, Operational Technology (OT) security has become a critical priority as nation-sta

JFrog Artifactory security vulnerabilities

2 clusters · 8 sources · last updated 3 days ago

Latest: CISA adds five exploited flaws in Artifactory, ScreenConnect, and RouterOS to KEV catalog

Security authorities and researchers have identified and tracked multiple critical vulnerabilities within the JFrog Artifactory platform. On September 2, the General Directorate of Information Systems Security (DGSSI) i

AI-augmented cyber threats and defenses

14 clusters · 61 sources · last updated 3 days ago

Latest: Autonomous AI agents drive new era of ransomware and cyber threats

Since early July 2026, AI has accelerated both cyber-offense and defense. Polymorphic AI malware, automated vulnerability scanning, and AI-enabled phishing—which saw a 55% increase over two years—have driven shifts towar

Cybersecurity defense and vulnerability trends

8 clusters · 30 sources · last updated 4 days ago

Latest: Cybersecurity teams adopt AI and new patching methods to manage rising CVE volumes

Cybersecurity experts continue to emphasize evolving vulnerabilities and defense strategies as digital infrastructure expands. The endpoint remains a primary entry point, with over two-thirds of incidents originating the

Magento and Adobe Commerce zero-day vulnerability

3 clusters · 12 sources · last updated 4 days ago

Latest: Adobe patches critical Magento vulnerability exploited in the wild

A critical zero-day vulnerability, known as ‘StyleSmuggler’ (CVE-2026-75650), was identified affecting Magento Open Source and Adobe Commerce platforms. The flaw allows for unauthenticated remote code execution (RCE) by

CISA infrastructure security and workforce initiatives

2 clusters · 4 sources · last updated 4 days ago

Latest: CISA releases guide to mitigate insider threats in critical infrastructure

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has initiated several efforts to strengthen national and international infrastructure security. Initially, the agency announced plans to hire approximatel

Microsoft Windows security update cycle

2 clusters · 29 sources · last updated 5 days ago

Latest: Microsoft issues record 974 security patches in September 2026

Microsoft announced that Windows devices enrolled in hotpatching programs will undergo forced restarts during September and October 2026. This requirement stems from technical needs for security component fixes in the Se

CISA vulnerability exploitation and patching directives

3 clusters · 14 sources · last updated 5 days ago

Latest: CISA adds Microsoft, Adobe, and N-able flaws to exploited vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued directives to federal agencies regarding multiple actively exploited software vulnerabilities. In late August 2026, CISA ordered the patching of

Escalating global ransomware and AI-driven cyber threats

17 clusters · 57 sources · last updated 5 days ago

Latest: Ransomware attacks reach record highs globally in 2026

Cyber activity and ransomware attacks saw significant acceleration through mid-2026. While earlier reports noted a rise in malicious domain registrations and AI-assisted exploitation, new data from Q2 2026 highlights a 4

Salt Typhoon cyber espionage campaign

2 clusters · 8 sources · last updated 8 days ago

Latest: Salt Typhoon cyber espionage targets U.S. telecom networks

A large-scale cyber espionage campaign attributed to the Chinese state-sponsored group ‘Salt Typhoon’ has targeted over 200 entities across 80 countries, with a primary focus on United States telecommunications infrastru

Software vulnerability exploits & patch response, 2026

41 clusters · 142 sources · last updated 8 days ago

Latest: Microsoft discloses nine vulnerabilities including two critical CVSS 10.0 flaws

The wave of exploitation observed in July 2026 continued into August, with significant impacts on government infrastructure and core operating systems. In Switzerland, the breach of federal SharePoint servers was further

Cybersecurity vulnerabilities in WordPress and Joomla

3 clusters · 13 sources · last updated 9 days ago

Latest: Elementor Pro WordPress plugin vulnerability exploited by hackers

Cybersecurity experts and agencies, including CISA, have reported an increase in attacks targeting WordPress and Joomla websites. Vulnerabilities in the WordPress ecosystem have risen significantly, with data from Patchs

NetScaler product security vulnerabilities

2 clusters · 2 sources · last updated 10 days ago

Latest: Citrix NetScaler vulnerabilities enable session hijacking and MFA bypass

Cloud Software Group issued warnings regarding multiple critical vulnerabilities in NetScaler ADC and NetScaler Gateway products. These flaws, including CVE-2026-19490 and CVE-2026-19489, presented risks such as authenti

Anthropic legal and regulatory tensions with US government

5 clusters · 156 sources · last updated 11 days ago

Latest: Anthropic wins legal challenge against Pentagon designation

The AI company Anthropic has entered a period of heightened tension with the United States government. To manage expanding international relations and domestic government interactions, Anthropic appointed Mariano-Florent

US and UK infrastructure targeted in suspected Iran-linked's

10 clusters · 224 sources · last updated 11 days ago

Latest: US-Iran conflict expands to cyberattacks and military strikes

Since the late‑July 2026 intrusion that knocked a Minnesota water plant offline, coordinated attacks on internet‑exposed Rockwell Automation/Allen‑Bradley PLCs have been reported in at least twelve U.S. states, including

Linux kernel vulnerability and security update trends

2 clusters · 9 sources · last updated 11 days ago

Latest: Linux kernel CVE fixes surge toward 2,000 per release due to AI scanning

Major Linux distributions, including Ubuntu, Debian, Fedora, and Red Hat, recently issued significant security updates to address over 150 CVEs. These patches targeted vulnerabilities such as privilege escalation, denial

Iran-US cyber warfare and maritime escalation

2 clusters · 6 sources · last updated 12 days ago

Latest: Iran targets U.S. critical infrastructure in series of cyberattacks

Following a temporary suspension of military operations between the United States and Iran, the conflict has transitioned toward asymmetric warfare, specifically targeting digital and economic infrastructure. Analysts su

SonicWall SMA 1000 zero-day exploits

2 clusters · 8 sources · last updated 12 days ago

Latest: SonicWall SMA 1000 appliances targeted by active zero-day exploits

SonicWall Secure Mobile Access (SMA) 1000 series appliances have been targeted by active zero-day exploits. Initial reports identified two vulnerabilities, CVE-2026-15409 and CVE-2026-15410, which allow for remote code e

AI-driven ransomware surge and evolving global threats

33 clusters · 180 sources · last updated 18 days ago

Latest: Cybersecurity industry shifts toward AI platforms to combat rising ransomware threats

The ransomware landscape is undergoing a structural shift, characterized by an increase in active criminal groups and the integration of AI. The number of active groups rose from 71 to 93 in the second quarter of 2026. W

Organizational cybersecurity human and technical risks

3 clusters · 6 sources · last updated 19 days ago

Latest: Human behavior remains a critical vulnerability in cybersecurity

Cybersecurity experts continue to identify growing vulnerabilities within organizational infrastructures, focusing on the intersection of technical failures and human-centric risks. Technical vulnerabilities persist in

Critical infrastructure cybersecurity security gaps

2 clusters · 4 sources · last updated 19 days ago

Latest: CISA red team exercises reveal critical infrastructure security gaps

CISA released an advisory following red team engagements that identified significant security gaps within critical infrastructure. A report titled ‘A Tale of Two SOCs’ compared the responses of a Government Services and

Oracle software security vulnerabilities and patching

2 clusters · 7 sources · last updated 20 days ago

Latest: Oracle HTTP Server vulnerability added to CISA's KEV Catalog

Oracle has implemented a monthly patching cadence to address a rise in AI-driven vulnerability identification. In August 2026, the company released 943 security patches to address 925 unique Common Vulnerabilities and Ex

Zimbra Collaboration Suite security vulnerability

2 clusters · 5 sources · last updated 21 days ago

Latest: Zimbra Collaboration Suite vulnerability actively exploited

A critical security vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, has been identified as a significant threat. The flaw allows unauthenticated attackers to execute operating system comman

Global cybersecurity vulnerabilities and spyware threats

2 clusters · 4 sources · last updated 22 days ago

Latest: Cybersecurity Alert: Critical vulnerabilities found in Microsoft, SAP, and Visa systems

A series of critical cybersecurity vulnerabilities and sophisticated digital threats have been identified across major software and hardware platforms. Initial reports highlighted flaws in the vm2 JavaScript sandbox pac

macOS Screen Sharing vulnerability exploitation

2 clusters · 37 sources · last updated 26 days ago

Latest: Apple patches critical macOS Screen Sharing vulnerability

A critical authentication vulnerability in macOS Screen Sharing, identified as CVE-2026-65400, is being actively exploited by threat actors to gain remote root access to affected systems. The flaw allows attackers to byp