Comparing 13 September 2026 with the previous day 12 September 2026.
The report shows that even phishing-resistant passkeys can be bypassed through social engineering and abused email delivery infrastructure to take over Microsoft cloud accounts.
No changes in this category.
No changes in this category.
The campaign uses fundraising and Starlink lures as bait and delivers a new toolkit generation that steals Telegram data and eavesdrops on victims.
The flaw allows local attackers to escalate privileges in the Linux kernel and affects unpatched Ubuntu systems.
Bundling several already-patched zero-days into a circulating exploit kit lets even less skilled espionage-motivated actors exploit them, making the window between patch availability and patch deployment the decisive risk factor.
The report provides a quarterly overview of the threat landscape for industrial automation systems and documents new APT malware attributed to Mirage Kitten, which is strategically relevant for production environments.
The report summarizes multiple vulnerabilities in Google Chrome without specific CVEs or exploit details; timely patch management remains necessary.
The vulnerability requires user interaction and affects widely used compression software installed in many corporate environments; a CVE ID is not yet available.
This BSI advisory lists multiple Edge vulnerabilities without CVE references and without indication of active exploitation.
The report describes a novel attack technique (Benchmaxxing) that goes beyond pure patch information and provides new TTPs for defense.
The advisory summarises multiple Linux kernel vulnerabilities without providing specific CVEs or evidence of active exploitation.