Cyber
Cybersecurity news from CISA, NIST, the FBI, national CERTs and vendor security teams: exploited vulnerabilities, advisories, breaches, ransomware and enforcement.
Meta says anti-scam campaign reached 303 million people in Asia-Pacific
Meta says its "One Step Ahead" education push, built with more than 25 agencies and safety groups, promoted passkeys, two-factor authentication and WhatsApp warnings across 18 countries.
Meta
GitHub Security Lab finds 24 Android bugs with AI taskflow agent
GitHub says custom LLM audit taskflows uncovered location tracking in OsmAnd and a Wikipedia app account takeover, but human review is still needed to judge severity.
GitHub
AWS to cut European Sovereign Cloud off from global backbone Oct. 24
Amazon says the Brandenburg-based region will run for several hours without its global network backbone to produce evidence of EU operational independence.
Amazon Web Services
Microsoft details NeedyMantis malware in targeted intrusions
Microsoft Threat Intelligence says the modular post-compromise framework has hit telecom firms, universities, nonprofits and government contractors since at least October 2025.
Microsoft
Top 10 vulnerabilities of the week (Sep 22–28, 2026): 5 actively exploited
This week's 10 most urgent vulnerabilities, including 5 CISA confirmed as actively exploited, ranked from CISA and NIST data.
CISA
BreakingNCSC warns of active exploitation in Citrix NetScaler flaws
The UK cyber agency says two of eight newly disclosed Citrix NetScaler ADC and Gateway vulnerabilities are being actively exploited and urges immediate mitigation.
NCSC (UK)
Vulnerability Watch, September 28, 2026: 8 critical CVEs and 5 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
Vulnerability Watch, September 27, 2026: 5 critical CVEs and 3 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
Vulnerability Watch, September 26, 2026: 4 critical CVEs and 6 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
BreakingMikroTik RouterOS flaw CVE-2026-67279 is being actively exploited, CISA warns
CISA added the MikroTik RouterOS vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
CISA