A3
20 [UPDATE] systemd: Multiple Vulnerabilities
High
What has changed?
Comparing 28 September 2026 with the previous day 27 September 2026.
Newly added
7 NEW C3
20 Attacks on Microsoft SharePoint vulnerability
CISA confirms actively exploited attacks against a high-risk SharePoint flaw; this goes beyond a mere patch recommendation and demonstrates an ongoing, real threat to exposed SharePoint instances.
High
NEW JADEPUFFER (Storm-3168) C3
20 JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The report shows that compromised service principals in Entra ID are no longer used merely for data theft but deliberately for destructive deletion operations in Azure , a TTP shift that goes beyond standard patch information.
High
NEW JadePuffer C3
20 JadePuffer agentic AI attacks target Azure, destroy cloud resources
The report describes an active, agent-driven ransomware campaign against Azure tenants with credential theft and resource destruction , i.e., new TTPs rather than a patch vulnerability.
High
NEW JadePuffer C3
20 JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
An AI-driven attacker was able to take over an Azure tenant using compromised credentials and destructively delete data , a reminder of the risk of credential leaks in cloud environments.
High
NEW A3
0 Linux Kernel: Multiple Vulnerabilities
Medium
A3
0 [UPDATE] Linux Kernel: Multiple Vulnerabilities
The advisory remains generic at kernel level and provides neither CVE IDs nor affected subsystems, so targeted prioritisation is not possible.
Medium
Newly KEV-listed
0No changes in this category.
Score moved
0No changes in this category.
No longer in report
6 KEV NEW C1
90 Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
The inclusion in the CISA KEV catalog proves real-world exploitation and thus more than a pure patch reminder: exposed SharePoint instances are at acute risk regardless of patch status.
Critical
CVSS
8.8
EPSS
2%
A3
0 Synology DiskStation Manager: Multiple Vulnerabilities
Medium
NEW A3
0 Google Chrome: Multiple Vulnerabilities
The report does not contain specific CVE IDs or details on affected versions, which complicates prioritization.
Medium
C3
0 Update now: Attackers could read arbitrary data from Synology NAS
The report summarizes three different vulnerabilities in Synology NAS that could allow arbitrary data to be read, without providing CVE details or indications of active exploitation.
Medium
NEW A3
0 [UPDATE] Linux Kernel: Multiple Vulnerabilities Enable Denial of Service
The report remains generic and does not name any CVE IDs or specific kernel versions, so no prioritized patch planning is possible.
Low
A3
0 Google Chrome / Microsoft Edge: Multiple vulnerabilities enable unspecified attack
The report lacks CVE IDs and exploitation details, so it provides no new strategic or tactical information beyond a general browser update.
Medium