Unknown perpetrators leveraged a legitimate government domain to obtain sensitive customer data from Revolut. Victims include users in Germany who are now being targeted by extortionists.
With iOS 26.7, Apple addresses over 80 security vulnerabilities without introducing any new features. The update targets users who prefer not to upgrade to iOS 27 just yet.
A maximum-severity flaw rated CVSS 10.0 in Adobe Commerce and Magento Open Source has been under active attack since early
Cisco has confirmed that a maximum-severity authentication bypass vulnerability (CVE-2026-20079, CVSS 10.0) in its Secure Firewall Management Center (FMC) Software
On 9 September 2026 the US cybersecurity agency CISA added a critical authentication-bypass flaw in Citrix NetScaler to its Known
GitLab shipped an out-of-band emergency release on 10 September 2026, closing a flaw rated the maximum CVSS score of 10.0.
On September 2, 2026, the Jenkins project shipped a large-scale security update fixing more than 30 vulnerabilities in the widely
A Host header weakness in the Python framework Starlette bypasses path-based access controls. CISA added the bug to its known exploited vulnerabilities catalog on September 2.
Microsoft shipped the biggest Patch Tuesday in company history, resolving 973 flaws. Two of them are already being exploited in the wild for local privilege escalation.
SAP’s September patch day closes 19 vulnerabilities. Two are highly critical: a CVSS 10.0 bug lets unauthenticated attackers run commands with admin privileges on the SAP host.
