CISA has confirmed real-world exploitation of six vulnerabilities and placed them on its Known Exploited Vulnerabilities Catalog. Four of the six hit Plex Media Server, covering two SSRF bugs, a URI-scheme handling flaw and a file-path control issue; the remaining two are an OS command injection in EG Secure Solutions SiteGuard Server Edition and an uncontrolled search path flaw in Siemens Software Center. Because the flaws are already being exploited, Binding Operational Directive 26-04 forces federal civilian agencies to fast-track fixes on any exposed system that could hand attackers full control, and to check for prior compromise first.
A joint advisory from the FBI, CISA, USSS and European law-enforcement agencies details the SafePay ransomware group, active since August 2024 and responsible for at least 600 attacks across North America, South America, Europe and Australia. SafePay gains access via stolen/brute-forced credentials, phishing, and exploitation of known VPN and edge-device vulnerabilities, then uses legitimate admin tools to move laterally, disable defenses, exfiltrate data and encrypt files with a ChaCha20/RSA hybrid scheme before demanding ransom.
AWS tested its AWS Security Agent (now part of AWS Continuum) against a freshly built benchmark of 37 real, recently disclosed CVEs, each run as a live containerized target with a hidden flag. Starting from a low-privilege endpoint with only a one-line hint and no proof-of-concept, the agent, running on Claude Opus 5, captured 33 of 37 flags through genuine end-to-end exploitation after an integrity audit, with 2 captures reclassified as unintended-path solves and 2 genuine misses where the agent broke the target before extracting the flag. AWS built this benchmark to avoid the contamination problem of public CVE suites, which models may have memorized from training data.
CISA confirmed real-world exploitation of four vulnerabilities and placed them on its Known Exploited Vulnerabilities Catalog. The affected products span network security and backup infrastructure: Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and two separate flaws in Ahsay's AhsayCBS backup platform. Under Binding Operational Directive 26-04, federal civilian agencies must now remediate these on an accelerated timeline, and CISA urges every organization to do the same.
Tamnoon built Tami, an agentic orchestrator on Amazon Bedrock that investigates cloud security findings from CNAPPs and cloud providers, scores remediation safety, and generates fixes with guardrails. The company reports a greater than 90% reduction in critical cloud exposure within 90 days with zero production issues. The system uses four specialized agents (investigation, safety-scoring, remediation, code-generation) each calling different foundation models through Bedrock, with Bedrock Guardrails and Cross-Region inference providing safety and scale.
Attackers are already abusing a command injection flaw in Microsoft Windows (CVE-2026-96951) and an authentication bypass via spoofing in Ivanti Connect Secure (CVE-2026-104935), prompting CISA to add both to its Known Exploited Vulnerabilities catalog. Under Binding Operational Directive 26-04, federal civilian agencies must now fast-track fixes for internet-exposed systems that could be fully taken over through these flaws. CISA is also pushing all organizations, not just government ones, to adopt the same risk-based patching approach.
AWS released Part 1 of a two-part guide showing how to build a post-quantum software supply chain using ML-DSA signatures (NIST FIPS 204) across AWS KMS, AWS Private CA, and IAM Roles Anywhere. The guide covers signing binaries, container images, and SBOMs, and is positioned as the first full cloud-provider walkthrough for post-quantum signing, from root-of-trust creation to policy enforcement. It responds to upcoming mandates: the NSA's CNSA 2.0 requiring exclusive quantum-resistant signatures by 2030, and the EU Cyber Resilience Act taking full effect in December 2027.
AWS published a follow-up security guide explaining how organizations can enforce which ML-DSA (post-quantum signature) parameter sets are allowed across their AWS environment. It covers using Service Control Policies (SCPs) at the organization or OU level and IAM permission boundaries to block creation and use of non-approved ML-DSA variants (e.g., blocking ML-DSA-44 while allowing ML-DSA-65/87). The guide also covers AWS Private CA and certificate controls, and discusses the trade-off between deny-lists (default-allow for new variants) and allow-lists (default-deny, requiring policy updates for new approved algorithms).
Cisco Talos' CAIRN research classifies a new malware archetype, 'A3: AI-Analysis Evasion,' where malicious code embeds natural-language text designed to manipulate language models used in automated malware triage. Talos traced the technique across four malware families (FRUITSHELL, PLOTSAFE, HOLLOWCLAD, MANTLEMAZE) and 84 samples from January 2025 to July 2026, showing it spreading from a simple copy-pasted comment to templated, multi-model-targeted 'template spraying' and fake intimidation messages. Controlled testing with a panel of five local LLMs found the simplest direct-instruction technique shifted model verdicts toward 'benign' in roughly 35% of runs, while more elaborate tricks had little effect or backfired by increasing suspicion.
Cisco Talos' Vulnerability Discovery & Research team disclosed a set of vulnerabilities across Adobe Photoshop, Apple macOS, Foxit Reader, and Microsoft Windows, all of which have already been patched by their respective vendors. The flaws range from privilege escalation and information disclosure to remote code execution and use-after-free bugs. Snort rule sets are available to detect exploitation attempts of these issues.
AWS describes a new two-stage access control architecture for Retrieval Augmented Generation (RAG) in Amazon Quick and Amazon Bedrock Knowledge Bases. Instead of relying only on periodically synced access control lists (ACLs), the system now verifies permissions in real time against the authoritative data source (e.g. Google Drive, SharePoint, Confluence) at query time, before passing content to the LLM. AWS says this closes security gaps caused by stale or incorrectly mapped permissions between sync cycles. Mondelēz International, with over 35,000 employees, is cited as a customer using this approach.
CISA added two Zammad vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active exploitation. CVE-2026-102489 is a session fixation flaw and CVE-2026-102490 involves improper privilege management in the Zammad helpdesk/customer service platform. Federal agencies must remediate under Binding Operational Directive 26-04, and CISA urges all organizations to prioritize these fixes.
CISA added CVE-2026-104286, a path traversal vulnerability in Fortinet FortiMail, to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation in the wild. Under Binding Operational Directive 26-04, federal civilian agencies must prioritize patching this vulnerability on internet-exposed assets, especially where it could grant full control of the system. CISA also recommends all organizations, not just federal agencies, prioritize remediation of KEV-listed flaws.
GitHub Security Lab built an open-source 'Taskflow Agent' that uses custom AI prompt workflows to audit code for vulnerabilities, and used it to find and report over 24 vulnerabilities in Android applications. Two detailed examples show the agent finding a location-tracking flaw in the OsmAnd navigation app and an account-takeover chain in the Wikipedia Android app via a deeplink parsing bug. The team notes LLMs are strong at finding complex logic vulnerabilities and understand API behavior well, but struggle to correctly judge severity and often produce false positives, so findings still require human review. The taskflows are open source and can be run on any GitHub repository via a Copilot-powered codespace script, though running them consumes premium model requests and can take hours.
CERT-EU has updated its advisory on critical vulnerabilities in Microsoft SharePoint Server, confirming active exploitation of CVE-2026-50522 (CVSS 9.8), a deserialisation flaw allowing remote code execution. This is part of a wider series of recently patched critical bugs — CVE-2026-32201, CVE-2026-45659, CVE-2026-56164 and CVE-2026-58644 — affecting on-premise SharePoint Server instances, some exploitable without authentication.
On 9 September 2026, Check Point released emergency hotfixes for two critical vulnerabilities (CVE-2026-85102 and CVE-2026-85103), both with CVSS 9.8, affecting Security Gateway, Security Management Server, and Spark Firewall deployments using Remote Access VPN or Site-to-Site VPN. Both flaws allow unauthenticated remote attackers to execute arbitrary code on affected appliances. CERT-EU urges immediate patching, prioritising internet-facing and perimeter devices.
Citrix disclosed 8 vulnerabilities affecting customer-managed NetScaler ADC and NetScaler Gateway, including 2 critical unauthenticated RCE flaws with CVSS 9.5 that Citrix confirms are being actively exploited. CERT-EU urges immediate patching and compromise assessment for internet-facing appliances. Other flaws include HTTP request smuggling, memory overflow bugs leading to RCE/DoS, a policy bypass, and a TCP ISN prediction issue.