United States tech news
Red Hat backs OpenShell runtime to sandbox AI agent execution
Red Hat says the open source project, part of NVIDIA's Open Agent Safety Platform, enforces policy on what agents can see, run and reach at the infrastructure layer.
Red Hat
AWS DataSync adds console dashboard for tracking task executions
Amazon says the new DataSync dashboard consolidates transfer status, rates and errors in one console view, at no additional cost in supported regions.
Amazon Web Services
Vulnerability Watch, September 27, 2026: 5 critical CVEs and 3 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
AWS adds PrivateLink VPC endpoints for IAM OIDC discovery APIs
Workloads in VPCs without internet access can now fetch JWKS verification keys and OIDC metadata over the AWS network, Amazon said.
Amazon Web Services
BreakingCISA Flags Two Exploited Citrix NetScaler Zero-Days in KEV List
CISA said threat actors are exploiting two critical NetScaler ADC and Gateway flaws globally, among eight vulnerabilities disclosed by Citrix.
CISA
US and China Launch “Super Intelligence” Dialogue on AI Risks
A White House fact sheet says the two governments agreed to drop the term artificial intelligence, open an SI dialogue by November 2026 and build an incident hotline.
The White House
Vulnerability Watch, September 26, 2026: 4 critical CVEs and 6 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
BreakingMikroTik RouterOS flaw CVE-2026-67279 is being actively exploited, CISA warns
CISA added the MikroTik RouterOS vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
CISA
BreakingMicrosoft SharePoint flaw CVE-2026-65660 is being actively exploited, CISA warns
CISA added the Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
CISA
BreakingWordPress Core flaw CVE-2026-87902 is being actively exploited, CISA warns
CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
CISA