I explain cybersecurity news, active attacks, privacy, surveillance technology, vulnerabilities, and OSINT in plain English, then give my independent analysis.
North AmericaEuropeMiddle EastEast AsiaOceaniaCurrent entries from CISA’s official Known Exploited Vulnerabilities catalog. These are confirmed weaknesses attackers have used, not simulated attack-map traffic.
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of serviceCitrix NetScaler Improper Input Validation Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.Microsoft SharePoint Code Injection Vulnerability
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.WordPress Core Remote File Inclusion Vulnerability
WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.“Live” means the feed updates from current public reporting. It does not identify every attack or prove the physical location of an attacker.
Each section answers a different question. Start with the one that sounds most useful to you.
Read the daily blog for verified facts, technical context, and independent opinion.
BLOG & ANALYSIS 02Understand important security updates and which ones matter first.
PATCH TUESDAY 03Use trusted public tools to research threats, breaches, and exposure.
OSINT TOOLS 04Learn common cybersecurity terms without technical jargon.
LEARN CYBERSeptember 29, 2026 · Insider Risk
The Federal Reserve's inspector general found systemic gaps in how the Board detected and investigated a departing employee's attempts to remove sensitive information. Investigators could not determine exactly what left the agency, and many alerts were false positives, but the watchdog issued nine urgent recommendations.
READ THE FULL POST & OPINION