threat intelligence
CVEs that matter, October 29, 2026: 3 to patch first, 3 exploited
This week's vulnerabilities with real evidence of attack, led by CVE-2026-46300 in Linux Kernel.
CISA
CVEs that matter, October 28, 2026: 3 to patch first, 3 exploited
This week's vulnerabilities with real evidence of attack, led by CVE-2026-111497 in Google Brotli.
CISA
CVEs that matter, October 27, 2026: 10 to patch first, 10 exploited
This week's vulnerabilities with real evidence of attack, led by CVE-2026-109619 in PHP Group PHP.
CISA
Unit 42 Details Top Initial Access Vectors for September 2026
Unit 42 outlines the top five initial access threat vectors observed during September 2026, highlighting edge exploitation and credential abuse.
Unit 42
Microsoft Digital Defense Report maps AI’s role in attacks
Microsoft says attackers are using AI for reconnaissance, social engineering and exploit development, while defenders must now secure agents that reach enterprise data, tools and APIs.
Microsoft
Cloudflare launches Threat Signals for all accounts, free
Cloudflare says its new agentic skills turn open-source threat reports into tagged, contextualized indicators that can feed WAF rules, with one RSS feed free per account.
Cloudflare