← Back to Blog
Security News
Security News — 30 September 2026
A daily, automatically-compiled digest of the cyber security stories that broke in the last 24 hours, drawn from 7 trusted feeds. Each entry is a short excerpt — follow the link to read the full article at its original publisher. Compiled 30 September 2026 · 10 items.
Urgent Vulnerabilities 3
Actively exploited, critical, or high-severity flaws — patch or mitigate first.
Microsoft Security Blog30 Sep
KEV · exploited
- Exploited
- Yes — CISA KEV
- Product
- Synacor Zimbra Collaboration Suite (ZCS)
- Impact
- OS command injection
- Audience
- Windows admins
- Action
- Patch per vendor / CISA KEV
Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportunities, and mitigation guidance. The post Unauthenticated command injection on internet-facing mail servers: tr…
Read at source →
Palo Alto Unit 4230 Sep
KEV · exploited
- Exploited
- Yes — CISA KEV
- Product
- Citrix NetScaler
- Impact
- Memory corruption
- Audience
- Network/firewall admins
- Action
- Patch per vendor / CISA KEV
Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in…
Read at source →
CISA Current Activity30 Sep
KEV · exploited
- Exploited
- Yes — CISA KEV
- Product
- Cisco Catalyst SD-WAN Manager
- Audience
- Network/firewall admins
- Action
- Patch per vendor / CISA KEV
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a f…
Read at source →
Threat Activity 3
Malware, campaigns and adversary tradecraft.
Microsoft Security Blog30 Sep
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications, clouds, infrastructure, and the AI agents now working alongside your teams. The post Secu…
Read at source →
Dark Reading30 Sep
In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.
Read at source →
Dark Reading30 Sep
The new White House Accord on so-called "Super Intelligence" calls on companies to implement greater controls and oversight over AI safety.
Read at source →
Research & Detection 2
Detection engineering, tooling and defensive analysis.
Dark Reading30 Sep
New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.
Read at source →
SANS Internet Storm Center (Handler Diary)30 Sep
Read at source →
Policy & Commentary 2
Industry, executive and AI-security perspective.
Cisco Talos30 Sep
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred…
Read at source →
Schneier on Security30 Sep
AI systems are regularly completing tasks in ways that their prompters don’t want or intend. Some of them are disturbing, and some of them are dangerous. This is something I’ve been calling “ genie behavior ,” because I think that really g…
Read at source →