Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on…
Month: September 2026
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Ravie LakshmananSep 09, 2026Vulnerability / Browser Security Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation…
UK committed datacentre pipeline grows to more than 14GW
The UK’s datacentre build-out is accelerating. Driven by the demand for artificial intelligence (AI) compute, and in the context of the government’s decision in 2024…
Microsoft Patch Tuesday September 2026 Fixes 974 CVEs
Microsoft’s Patch Tuesday September 2026 rollout has broken previous records, with the company addressing 974 CVEs across its product lineup in a single release. Two…
ChatGPT Sandbox Flaw Let A Planted Prompt Ship Victim’s Gmail Data To Another Account
Check Point Research disclosed Tuesday that a weakness in ChatGPT’s code-execution sandbox let data from one user’s connected Gmail account be moved into a separate,…
UOMO bill headed to the Senate
Key points The universal mobile service obligation bill, requiring Telstra, Optus and TPG Telecom to provide voice and text coverage across up to 5 million…
Ivanti Patches Critical Flaws Across Enterprise Security Products
Ivanti on Tuesday announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM)…
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory Pierluigi Paganini September 09, 2026 PoisonedRefresh rootkit injects PHP…
Russian national extradited to US for alleged involvement in bank-account takeover scheme
Authorities extradited a 36-year-old Russian national from the Republic of Georgia under accusations of widespread bank-account takeover attacks, including a scheme to defraud two banks…
Rapid7 highlights two exploited flaws in September Patch Tuesday
Microsoft’s September 2026 Patch Tuesday includes 999 vulnerabilities across Microsoft and non-Microsoft products, according to commentary from Rapid7 lead software engineer Adam Barnett. Barnett said…
50% of CISOs see Mythos as a sign to exit the profession
“In the security space, I would use the AI for anomalies and to triage existing investigations,” he says. “I probably wouldn’t start out with using…
Wiz Research team discovers a major risk to AI systems
Wiz Research has conducted a series of investigations into leading AI-as-a-service providers in recent months. In the course of that work, we have discovered critical…