Security news What security media and vendors’ research teams have published, newest first. A brief is written from what the publisher puts in its feed, says who reports what, and links to the original; where the feed has only a headline, so do we. These are not authorities: read the claims as theirs.
All sources Cisco Talos CrowdStrike Google Threat Intelligence Krebs on Security Microsoft Security The Hacker News Unit 42 (Palo Alto Networks) Zero Day Initiative Unit 42 (Palo Alto Networks) · Research · 30 Sep 2026
Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) Read the original at unit42.paloaltonetworks.com ↗
Microsoft Security · Blog · 30 Sep 2026
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026 Read the original at www.microsoft.com ↗
Microsoft Security · Blog · 30 Sep 2026
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 Read the original at www.microsoft.com ↗
Google Threat Intelligence · Research · 30 Sep 2026
Vulnerability Discovery and Exploitation Trends in the AI Era Read the original at cloud.google.com ↗
Cisco Talos · Research · 30 Sep 2026
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor Read the original at blog.talosintelligence.com ↗
Microsoft Security · Blog · 29 Sep 2026
Phishing Abuses RMM Tools for Persistent Access Read the original at www.microsoft.com ↗
Microsoft Security · Blog · 29 Sep 2026
Beyond source code: A path to the keys to the kingdom Read the original at www.microsoft.com ↗
Microsoft Security · Blog · 29 Sep 2026
Star Blizzard refines phishing and malware delivery with the RedFlick technique Read the original at www.microsoft.com ↗
Google Threat Intelligence · Research · 29 Sep 2026
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances Read the original at cloud.google.com ↗
Unit 42 (Palo Alto Networks) · Research · 29 Sep 2026
OperTraitors: How Kubernetes Operators Betray Your Security Posture Read the original at unit42.paloaltonetworks.com ↗
Cisco Talos · Research · 29 Sep 2026
Securing the keys to the kingdom: Announcing Executive Threat Detection Read the original at blog.talosintelligence.com ↗
CrowdStrike · Blog · 29 Sep 2026
Copy, Paste, Compromised: How ClickFix Attacks Work and How CrowdStrike Stops Them Read the original at www.crowdstrike.com ↗
Krebs on Security · News · 28 Sep 2026
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Read the original at krebsonsecurity.com ↗
Microsoft Security · Blog · 28 Sep 2026
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations Read the original at www.microsoft.com ↗
CrowdStrike · Blog · 28 Sep 2026
A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack Read the original at www.crowdstrike.com ↗
Unit 42 (Palo Alto Networks) · Research · 25 Sep 2026
3 Consulting Myths Debunked by Unit 42 Experts Read the original at unit42.paloaltonetworks.com ↗
Krebs on Security · News · 25 Sep 2026
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions Read the original at krebsonsecurity.com ↗
Google Threat Intelligence · Research · 25 Sep 2026
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft Read the original at cloud.google.com ↗
Cisco Talos · Research · 24 Sep 2026
Trust and the enticing consultancy offer Read the original at blog.talosintelligence.com ↗
Google Threat Intelligence · Research · 24 Sep 2026
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure Read the original at cloud.google.com ↗