Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
Four more local-root bugs disclosed September 18 — different from Monday’s KEV trio. Confirm your kernel covers all four....
Two CVSS 9.8 unauth deserialization bugs on the ITSM brain. On-prem needs September updates or 2026.2+....
CISA added the GS1900 CGI stack overflow to KEV yesterday. Federal due September 24 — patch, lock management VLANs, triage....
Monday reboot-and-revoke brief: Linux kernel KEV trio due today, Orkes Conductor RCE, SolarWinds ARM, CrowdSec offboarding....
TanStack credential theft plus retained ex-employee GitHub access cloned ~170 private repos....
Hard-coded static key yields unauthenticated RCE on ARM ≤2026.2. Ship 2026.2.1....
Pre-auth INLINE scripts escape GraalVM. Fortinet is blocking thousands of attempts — upgrade to 3.30.2+....
CISA's three exploited Linux kernel bugs are due today. Patch, reboot, then triage....
Friday clock stories: Cisco ISE root bypass due Saturday, Acronis hosting LPE, MikroTik MikroTrick, Check Point management root....
Pre-auth login overflow yields root on Security Management / Log servers. Apply LivePatch sk1000155; lock Trusted Clients....
CERT.pl MikroTrick chain: SSH auth bypass + privilege escalation. Two CVEs already on CISA KEV....
Default-permissions LPE on Acronis cPanel/Plesk backup agents under limited targeted exploitation. Same Saturday clock....
CVSS 10 ISE/ISE-PIC API auth bypass can land root. Active exploitation; federal due date Saturday September 19....
