The flood of new CVEs can make it hard to know what matters. But there are tools to help find our way.

Last Updated: 2026-09-29T14:53:55Z (UTC) What’s Happening Citrix has disclosed 8 critical CVEs. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 There’s also an associated blog post. Affected Versions Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23 Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279 Indicato...

A critical perimeter emergency is unfolding across enterprise infrastructure worldwide as threat intelligence teams confirm the active, in-the-wild exploit...

OpenAI’s chatbot fed the shooter’s violent fantasies and planning up to the massacre.

I asked Muse to archive the files it could see and send them to my Google Drive. It did.

A not-for-profit organization dedicated to the teaching of best practices in cyber threat intelligence, and the mutual sharing of timely, actionable, and relevant intelligence among the community.

A not-for-profit organization dedicated to the teaching of best practices in cyber threat intelligence, and the mutual sharing of timely, actionable, and relevant intelligence among the community.

Last Updated: 2026-09-23T15:47:14Z (UTC) CVE: TBA CVSSv3: tentative 9.8 (per vuln publisher, not ratified) What’s Happening Research firm elttam has disclosed a vulnerability in the Shrubbery fork of the tac_plus TACACS+ authentication library used in multiple networking devices. The vulnerability, if fully exploited, can lead to remote code execution on target devices. Crashing systems is also a possibility. Secret disclosure is a natural result of this vulnerability. The post is long,...

Last Updated: 2026-09-22T22:18:11Z (UTC) Arista published a security advisory today regarding its VeloCloud Orchestrator. The perfect-10 CVSS vulnerability: …may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Yes, it “may” indeed. It’s now confirmed exploited and on CISA’s KEVs as of today. Ther...

Last Updated: 2026-09-22T20:36:25Z (UTC) What’s Happening A F5 advisory published 2026-09-22 details CVE-2026-94127 (CVSSv3 9.8). When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). It is unknown how common this configuration is as of this writing. Affected Products/Versions The affected product is BIG-IP APM (Access Policy Manager), versions: 21.1.0, patched in Hotfix-BIGIP-21.1.0...

Last updated: 2026-09-22T19:41:29Z (UTC) CVSSv3: 9.8 What’s Happening In what’s-old-is-new-again news, two CVEs were released today for Checkpoint Security Gateway management toolsets, including a pre-auth remote code execution and a path traversal in the management web service. Here are Check Points internal support center details: Since I started writing this Check Point posted notification of exploitation on their blog. Actions Check the advisories above for affected versions and o...

Python Workers allow developers to run Python web frameworks and AI orchestration libraries natively in the Cloudflare Workers runtime. You can seamlessly integrate with Cloudflare's ecosystem including D1, R2, and Workers AI without writing any JavaScript glue code.

Last Updated: 2026-09-18T12:35:00Z (UTC) What’s Happening According to the Rust language security response working group, maintainers of rust-lang (the repo comprising the Rust language itself) and popular packages (crates) are being targeted by social engineering attacks intended to compromise the repository. Per the post: A video call is set up for something positive — maybe for a job, maybe for a project, maybe for a contract opportunity — and then that’s used as a vector to either g...

Plugin4Shell is a zero-click, high-severity RCE affecting all four major AI coding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind AI supply-chain attack, a trusted plugin is silently swapped for a malicious one and auto-installed past the agent's SHA pinning - a flaw no marketplace can fix, so users must update their agent.

Microsoft, OpenAI emails reveal fear of AI “doom loop” killing news orgs.

The Independent Federated Intelligence Network