A3
20 [UPDATE] systemd: Multiple Vulnerabilities
High
What has changed?
Comparing 28 September 2026 with the previous day 21 September 2026.
Newly added
7 NEW C3
20 Attacks on Microsoft SharePoint vulnerability
CISA confirms actively exploited attacks against a high-risk SharePoint flaw; this goes beyond a mere patch recommendation and demonstrates an ongoing, real threat to exposed SharePoint instances.
High
NEW JADEPUFFER (Storm-3168) C3
20 JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The report shows that compromised service principals in Entra ID are no longer used merely for data theft but deliberately for destructive deletion operations in Azure , a TTP shift that goes beyond standard patch information.
High
NEW JadePuffer C3
20 JadePuffer agentic AI attacks target Azure, destroy cloud resources
The report describes an active, agent-driven ransomware campaign against Azure tenants with credential theft and resource destruction , i.e., new TTPs rather than a patch vulnerability.
High
NEW JadePuffer C3
20 JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
An AI-driven attacker was able to take over an Azure tenant using compromised credentials and destructively delete data , a reminder of the risk of credential leaks in cloud environments.
High
NEW A3
0 Linux Kernel: Multiple Vulnerabilities
Medium
A3
0 [UPDATE] Linux Kernel: Multiple Vulnerabilities
The advisory remains generic at kernel level and provides neither CVE IDs nor affected subsystems, so targeted prioritisation is not possible.
Medium
Newly KEV-listed
0No changes in this category.
Score moved
0No changes in this category.
No longer in report
8 NEW B2
100 Windows Exploitation Techniques: Dangling COM Object Registrations
The report provides a public exploit for an incomplete Windows patch and describes a novel technique for abusing dangling COM object registrations.
Critical
CVSS
7.8
EPSS
5%
NEW Jade Sleet C3
75 Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
The report shows that North Korean APT groups deliberately abuse IT service providers as a stepping stone into their customers' networks, meaning the real risk lies less with the compromised provider than with its clients.
Critical
NEW Lazarus Group C3
75 Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
The campaign shows that North Korean actors use fake recruitment and coding-test processes to target IT and engineering professionals and trick them into executing malicious code , a social-engineering vector that can also reach non-crypto engineering teams in DACH organizations.
Critical
NEW C3
20 Synology warns: Critical NAS vulnerabilities enable data theft
The flaws allow not only reading but also writing to the NAS, enabling manipulation or persistence on storage systems , patches are available.
High
NEW B3
15 Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
The 'PAYLOAD' ransomware uses tampered Group Policy Objects as a distribution mechanism, so a single compromised AD account can trigger infection across an entire domain network.
High
NEW A3
0 [UPDATE] Google Chrome and Microsoft Edge: Multiple Vulnerabilities
The BSI WID does not provide CVE IDs or severity ratings; the report is an aggregated patch update for Chrome and Edge.
Medium
NEW C3
0 Microsoft reminds admins to migrate Entra ID users to passkeys
Microsoft announces the end of SMS first-factor authentication in Entra ID starting February 2027, requiring early migration to passkeys to avoid sign-in disruptions.
Low
NEW A3
0 Microsoft Edge: Vulnerability Allows Privilege Escalation
The report contains no CVE ID, no CVSS score, and no exploitation status, which complicates prioritization for patch processes.
Medium