September 2026 Patch Tuesday: Updates and Analysis
September 2026 Attack Surface Overview Microsoft Office received 22 Critical patches this month, of which 12 are exploitable via Preview Pane or Reading Pane. When Preview Pane or Reading…
-
-
Ransomware’s AI Adoption Curve: From Marketing Claim to Operating Model
Executive summary Somewhere in the first nine months of 2026, AI stopped being a talking point in ransomware and became part of how the work actually gets done. Tracking new…
-
Hunting Vulnerabilities Using Frontier Models
Executive Summary Over several months, Okta has used frontier AI models to proactively hunt for vulnerabilities and secure Okta’s products as part of OpenAI’s Daybreak Cyber Partner Program and Anthropic’s…
-
The agentic harness for Tenable Hexa AI: an inside look
Learn why Tenable treats agentic LLMs as untrusted insiders, and how we’ve made sure you can control and monitor the AI agents making changes in your production security environment Key…
-
Threat matrix: Mapping threats across cloud web applications
In this article Microsoft introduces the cloud web applications threat matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms….
-
Black Hat USA 2026: Building the Agentic SOC, One Live Event at a Time
Cisco was proud to return to Black Hat USA as the Official Security Cloud Provider and the longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations…
-
How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility
We’ve rewritten the module registry in workerd, the core open-source component of the Workers runtime, to be faster, more standards-compliant, and more closely aligned with Node.js’ module registry. Over the…
-
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Research by: Alexey Bukhteyev Check Point Research discovered a covert cross-account command channel through which an attacker could use a victim’s ChatGPT session to execute hidden tasks with the tools,…
-
PEEP Malware Turns Chrome, Edge Into Backdoors
A newly disclosed malware toolkit can turn Google Chrome and Microsoft Edge into persistent backdoors, giving attackers a route from the browser into the underlying operating system. Researchers at SOCRadar…
-
Patch Tuesday – September 2026
CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability Exploitation Unlikely No 6.5 CVE-2026-69744 Windows Kerberos Denial of Service Vulnerability Exploitation Unlikely No 7.5 CVE-2026-69760 Windows Kerberos Denial of Service…
