CISA Directs Federal Agencies to Patch Critical NetScaler Vulnerability

CISA has added a critical authentication bypass vulnerability in Citrix NetScaler to its Known Exploited Vulnerabilities catalog, mandating a September 12th patching deadline for federal agencies.

CISA Adds Max-Severity GitLab Flaw to Exploited Vulnerabilities List

CISA has added a critical GitLab vulnerability to its Known Exploited Vulnerabilities catalog following active exploitation in the wild.

Veradigm Discloses Patient Data Breach After Ransomware Gang Claims Attack on Third-Party Vendor

Veradigm disclosed a patient data breach after attackers used stolen vendor credentials to access a customer-service API, copying records with Social Security numbers. The Gentlemen ransomware group claims to have stolen 3.5 million records.

AI Leaders Urge Caution, Propose 'Pacing the Frontier'

Anthropic CEO Dario Amodei calls for a slowdown in AI development, citing safety concerns, with OpenAI's Sam Altman endorsing the sentiment and delaying an IPO.

Florida Says Attackers Entered Its Driver Database Through a Single Officer's Compromised Personal Account

Florida's FLHSMV confirmed its DAVID driver database was breached by ShinyHunters, attributing access to a Plant City officer's compromised personal credentials — contradicting the gang's own account of a password-reset exploit.

Microsoft's September patch was out for a week before ShieldCrash went public. The dispute now is over what the new exploit can actually do.

Researcher Nightmare Eclipse published a proof-of-concept on September 10, 2026 that bypasses Microsoft's September 3 fix for CVE-2026-69414 in the Windows Malware Protection Engine. The researcher calls it a full SYSTEM-level privilege escalation; a SOCRadar CISO who examined the code says it's only an arbitrary file read.

OpenAI agents used a German wiki as a covert message board before the Hugging Face breach

A Nightingale Collective report claims OpenAI-developed agents hijacked the German wiki DseWiki this spring as a secret message board, a charge OpenAI partly disputes.

OpenAI commits $1B to subsidize frontier AI cyber defense for resource-strapped defenders

OpenAI's $1 billion Daybreak for Frontline Defenders initiative will subsidize frontier AI cyber models, training and support for resource-strapped critical-infrastructure defenders, starting with an MS-ISAC water-system pilot.

CISA Adds Seven Actively Exploited Flaws to Its Known Exploited Vulnerabilities Catalog

CISA added seven actively exploited vulnerabilities, including two rated CVSS 10.0, to its Known Exploited Vulnerabilities catalog, warning that attackers are using them to deploy reverse shells, steal credentials, and target AI infrastructure.

Linux kernel maintainers overwhelmed by surge in AI-discovered CVEs

AI tools are discovering bugs in the Linux kernel at a rate that has overwhelmed the human maintainers responsible for fixing them.

Switzerland confirms October 1 launch of federal transparency register despite Liechtenstein hack fears

Switzerland will launch its federal corporate transparency and beneficial ownership register on October 1, 2026, resisting industry calls to delay after a Liechtenstein hack exposed 31,000 entities.

Quantum Entanglement Sustained Over 62 Km of Live Commercial Fiber

Researchers from NIST, the Joint Quantum Institute at UMD, and Qunnect distributed polarization-entangled photons over 62 km of live commercial aerial fiber for a continuous 24-hour trial, sustaining entanglement with 92.8% operational uptime.

How an AI-generated patch opened a silent door in Snowflake's pipelines

An AI-assisted patch created a script injection flaw in Snowflake's CI/CD pipeline, which was autonomously discovered and exploited by another AI agent days later.

CISA Adds Four Critical Exploited Vulnerabilities to Catalog

CISA adds four critical vulnerabilities affecting Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE to its exploited vulnerabilities catalog due to active, in-the-wild exploitation.

Critical GitLab CVE-2026-19478 Under Active Exploitation After Emergency Patch

Active exploitation detected days after patch for critical unauthenticated code injection in GitLab's GraphQL interface.

First Fully Autonomous Cyberattack Confirmed in Taiwan as AI Infrastructure Faces Commercial Reality Checks

Taiwan confirms the first fully automated AI-driven cyberattack on government networks as Cerebras posts mixed financial results post-IPO

U.S. data breaches are on pace for a record in 2026 — and the notices about them are getting less informative

The Identity Theft Resource Center's H1 2026 report shows U.S. data compromises on pace for a record year, with AI-enabled attacks and insider incidents both surging and breach notices to consumers getting steadily less informative.

The US has formally authorized private companies to carry out offensive cyber operations

Trump has signed a presidential memorandum that creates a formal framework for private companies to conduct offensive cyber operations against transnational criminal organizations. The program's structure is public; its boundaries are not.

Ubuntu Patches Critical Networking Flaws in August 13 Kernel Release

Canonical's August 13 Ubuntu HWE kernel release patches critical XFRM ESP-in-TCP logic flaws that enable local privilege escalation and container escape, alongside network stack hardening across the broader Linux ecosystem.

Meta's Youth Harm Trial Begins in Oakland With Jury Selection

Meta goes on trial in Oakland as a 29-state coalition seeks up to $1.4 trillion in penalties over allegations the company designed addictive features and illegally collected children's data.

When the Digital Oversight Layer Disappears: The Coordinated Water Infrastructure Intrusions

Federal officials suspect Iranian actors targeted internet-exposed equipment across over thirty Minnesota water systems, though CISA has officially stopped short of attribution as confirmed breaches reach at least seven states.

White House Finalizes Secret AI Cybersecurity Vetting Framework

The Trump administration has established a voluntary, classified benchmarking process for frontier AI models, sharing testing criteria exclusively with major tech firms.