The highest-impact items — the "if you only read one thing today" list, pulled from across every section.

Saturday, September 19, 2026

CRITICALCritical Pre-Auth RCE in Orkes Conductor Exploited in the Wildrce · exploitation · orchestration · critical-vulnerability

Friday, September 18, 2026

CRITICALCisco Zero-Day in ISE Allows Unauthenticated RCE (CVSS 10.0)cisco · zero-day · rce · authentication-bypassCRITICALMicrosoft Patches CVSS 10.0 Azure AI Foundry Privilege Escalation Flawmicrosoft · azure · privilege-escalation · ai

Thursday, September 17, 2026

CRITICALCritical Check Point Management Flaw Allows Unauthenticated Root Code Executioncheck-point · rce · root-privileges · unauthenticatedCRITICALCritical Docker Sandboxes Flaw Allows macOS Host File Accessdocker · macos · sandbox-escape · privilege-escalation

Saturday, September 12, 2026

CRITICALCISA Adds Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV Catalogcisa · kev · vulnerabilities · exploitation

Friday, September 11, 2026

CRITICALGitLab Patches Critical Path Traversal Flaw Exploited In-The-Wildgitlab · path-traversal · rce · vulnerabilityHIGHNew Android Malware 'Mantax Otax' Combines Ransomware and Spywareandroid · malware · ransomware · spyware

Thursday, September 10, 2026

CRITICALCheck Point VPN Flaws Allow Unauthenticated Remote Code Executionvpn · rce · check-point · vulnerability

Wednesday, September 9, 2026

CRITICALMicrosoft Patches Record 974 Vulnerabilities, Including Two Zero-Dayspatch-tuesday · zero-day · microsoft · vulnerabilities

Sunday, September 6, 2026

CRITICALMikroTik Routers Hijacked via Internet-Exposed SSH Without Authenticationmikrotik · ssh · router-exploit · unauthenticated

Saturday, September 5, 2026

CRITICALUnpatched Magento and Adobe Commerce Zero-Day Actively Exploitedzero-day · rce · e-commerce · magento

Friday, September 4, 2026

CRITICALCritical Citrix NetScaler Authentication Bypass Actively Exploitedcitrix · netscaler · auth-bypass · exploitCRITICALGoogle Patches Actively Exploited Chrome V8 Zero-Daychrome · zero-day · v8 · code-execution

Wednesday, September 2, 2026

CRITICALSonicWall SMA 1000 Zero-Days Exploited for Unauthenticated RCEsonicwall · zero-day · rce · vpn

Saturday, August 29, 2026

CRITICALKeycloak Account Takeover Vulnerability via Reset-Credentials Bypasscve · authentication · account-takeoverCRITICALMultiple Critical Flaws in WordPress Plugins and Themeswordpress · cve · rce · plugin-vulnerability

Friday, August 28, 2026

CRITICALMcKesson Discloses Breach Following ShinyHunters Data Theft Claimsdata-breach · healthcare · extortion · shinyhuntersCRITICALCosmos EVM Flaw Exploited to Drain Funds from Multiple Blockchainsblockchain · exploit · cryptocurrency · vulnerabilityCRITICALPaperCut Releases Second Emergency Patch for Actively Exploited Flawscve · exploit · rce · zero-day

Friday, August 21, 2026

CRITICALMicrosoft Defender Driver Can Be Abused to Delete Security Softwarewindows · privilege-escalation · edr-bypass · microsoft-defenderCRITICALMicrosoft Patches Critical Entra ID Flaw (CVSS 10.0)microsoft · entra-id · rce · vulnerability

Thursday, August 20, 2026

CRITICALRust Crates Compromised in Supply Chain Attack, Delivering Malwaresupply-chain · rust · malware · developer-toolsCRITICALCritical NetScaler Flaw Allows Authentication Bypasscitrix · netscaler · authentication-bypass · vulnerability

Wednesday, August 19, 2026

CRITICALCISA Warns of Actively Exploited macOS, SharePoint, vCenter, and Microsoft IKE Flawscisa · kev · vulnerabilities · exploitation