Security Roundup - ColibriSec

ColibriSec Weekly Security Roundup October 9 2026

News

Security Roundup: Atlassian Zero-Day, Citrix NetScaler Flaw, AhsayCBS RCE Chain, FBI MicroScan Takedown (Week of October 9, 2026)

Executive Summary: The week of October 2 to October 9, 2026, delivered a rapid succession of perimeter breaches, critical zero-day weaponization, and historic multinational law enforcement actions. Atlassian self-hosted Data Center installations faced mass automated exploitation following proof-of-concept release for CVE-2026-21589 (CVSS 9.3), a path traversal vulnerability in web

ColibriSec Weekend Security Roundup October 5 2026

News

Security Roundup: Citrix NetScaler SAML Zero-Day, Denmark 8.8M Registry Breach, Rejetto AI RCE, Asian Financial Infiltrations (Weekend of October 5, 2026)

Executive Summary: The weekend of October 3–5, 2026, delivered an unprecedented surge of critical perimeter exploits, monumental government and enterprise data leaks, and AI-driven intrusion vectors. Headlining the emergency alerts, Citrix confirmed active targeted exploitation of CVE-2026-88779—a high-severity memory overflow zero-day in NetScaler ADC and Gateway configured as

ColibriSec Weekly Security Roundup October 2 2026

News

Security Roundup: Fortinet FortiMail Zero-Day, Cisco SD-WAN KEV, Agentic AI DIVD Breach, KillSec Takedown (Week of October 2, 2026)

Executive Summary: The week of September 26 to October 2, 2026, marked a watershed moment in cybersecurity, defined by the real-world operationalization of autonomous agentic AI exploit chains, critical zero-days across foundational edge appliances, and historic international law enforcement takedowns. Federal authorities added active zero-days in Fortinet FortiMail (CVE-2026-104286) and

ColibriSec Weekend Security Roundup September 28 2026

News

Security Roundup: Citrix NetScaler Active Zero-Days, Microsoft SharePoint KEV, Kiteworks Precautionary Shutdown (Weekend Edition - September 28, 2026)

Executive Summary: The weekend of September 26–28, 2026, unleashed one of the most critical sequences of edge appliance emergencies and AI-augmented cyber offensives of the year. Citrix released urgent out-of-band updates and CTX697096 advisories for two actively exploited zero-day Remote Code Execution (RCE) flaws in NetScaler ADC and Gateway

ColibriSec Weekly Security Roundup September 25 2026

News

Security Roundup: F5 BIG-IP APM Buffer Overflow, Check Point Management Zero-Day, Arista VeloCloud in CISA KEV (Week of September 25, 2026)

Executive Summary: The final week of September 2026 witnessed an unprecedented wave of critical edge infrastructure and enterprise appliance disclosures. CISA added three high-impact zero-days to the Known Exploited Vulnerabilities catalog: an unauthenticated heap-based buffer overflow in F5 BIG-IP Access Policy Manager (CVE-2026-94127, CVSS 9.8), an actively exploited path

ColibriSec Weekend Security Roundup September 21 2026

News

Security Roundup: Cisco AsyncOS Root RCE, Linux Kernel Netfilter in CISA KEV, Google Pixel Modem Zero-Day (Weekend Edition - September 21, 2026)

Executive Summary: Over the September 19–21 weekend, critical perimeter and infrastructure zero-day disclosures reached peak urgency. Cisco released emergency updates for an actively exploited unauthenticated root Remote Code Execution (RCE) flaw in Cisco Secure Email Gateway (AsyncOS), tracked as CVE-2026-76461. Simultaneously, CISA added Linux kernel Netfilter bridge memory corruption

en

Security Roundup: Cisco ISE Critical CVSS 10.0 Zero-Day Under Active Attack, VMware Escape, and Acronis in CISA KEV (Week of September 18, 2026)

Executive threat intelligence briefing: Cisco ISE CVSS 10.0 zero-day (CVE-2026-76460), VMware hypervisor escape (VMSA-2026-0007), and Acronis in CISA KEV.

en

Security Roundup: GitLab Maximum CVSS 10.0 Arbitrary File Read in CISA KEV, Adobe Commerce Critical RCE, and FortiOS Heap Overflow (Weekend Edition — September 14, 2026)

Executive weekend threat intelligence briefing: GitLab CVSS 10.0 file read in CISA KEV (CVE-2026-85706), Adobe Commerce RCE (CVE-2026-75650), and Fortinet exploits.

en

Security Roundup: Microsoft September 2026 Patch Tuesday Zero-Days (974 CVEs), Ivanti Critical RCE Wave, and Edge Flaws (Week of September 11, 2026)

Executive threat intelligence briefing: Record Microsoft September 2026 Patch Tuesday with two active zero-days (CVE-2026-85880, CVE-2026-81963) and Ivanti dual CVSS 9.8 RCEs.

en

Security Roundup: Cisco Nexus 9000 Silicon One Root RCE, CISA KEV Exploitation Waves, Sangoma Switchvox Flaws, and WordPress Plugin Mass Attacks (Weekend Edition — September 7, 2026)

Executive weekend threat intelligence briefing: Cisco Nexus 9000 Silicon One root RCE (CVE-2026-20212), Sangoma Switchvox SQLi in CISA KEV, and WordPress mass attacks.

en

Security Roundup: CISA 7-Vulnerability KEV Wave, Google Chrome V8 Zero-Day, CrowdStrike 'FalconFlank' EDR Flaw, and SonicWall Chained Exploits (Week of September 4, 2026)

Executive weekly threat intelligence briefing: Google Chrome V8 zero-day (CVE-2026-85046), CrowdStrike FalconFlank EDR bypass, and CISA KEV additions in LiteLLM and Artifactory.

en

Security Roundup: Spring Framework 91-Advisory Wave, SonicWall SMA Zero-Day Exploitation, and RansomHub Healthcare Extortions (Weekend Edition — August 31, 2026)

Executive weekend threat intelligence roundup: Spring for GraphQL critical RCE, SonicWall SMA chained zero-days by UTA0533, and RansomHub hospital extortions.