Know what changed. Know what matters.

Attackers used two unpatched JFrog Artifactory flaws to gain administrative control and plant backdoors on self‑hosted servers between Aug 15–Sep 8.

U.S. Cybersecurity Agency urges federal agencies to patch Cisco, Citrix, and Fortinet flaws by Sept 12, 2026.

The U.S. Department of Justice seized Telegram channels and cryptocurrency wallets tied to Xinbi Guarantee, freezing $52.8 million in digital currency.

A new phishing campaign uses AI-generated messages and fake login pages to lure Facebook users into giving personal data.

A discovered prompt injection flaw lets attackers silently steal Gmail info via ChatGPT.

A flaw in FreeIPA allows unauthenticated clients to create a Kerberos identity and become administrators.

A new Chromium-based toolkit called PEEP installs hidden extensions in Chrome and Edge after an initial compromise, bypassing Web Store checks by forging Secure Preferences.

The remote monitoring platform N‑Central now requires its fourth hotfix after an unauthenticated RCE vulnerability was discovered.

Recent alerts detail Mikrotik routers hijacked through exposed SSH, a new REVSTEALER crypto‑miner module disabling Windows Update and Defender, and an unpatched Magento/Adobe Commerce zero‑day enabling server backdoors.

Attackers can gain full administrative access to MikroTik routers through exposed SSH without credentials.

A new unpatched flaw in Magento Open Source and Adobe Commerce lets attackers execute malicious code on store servers without authentication, discovered by Dutch security firm Sansec on September 5.

Attackers used newly disclosed PaperCut vulnerabilities to steal credentials from U.S. and European schools.