During the September 2026 Patch Tuesday, Microsoft resolved no fewer than 964 CVEs: 104 critical and 860 important. Extra urgent: two zero-days (CVE-2026-81963 and CVE-2026-85880) are already being actively exploited and can grant attackers SYSTEM privileges. Serious vulnerabilities in Remote Desktop, Windows DNS, Kerberos, and Exchange Server, among others, have also been addressed. With 44.7% […]
The NCSC warns that vulnerable WordPress websites are currently being exploited by a botnet. Attackers are placing malicious code on compromised websites, causing visitors to be unknowingly used for cyberattacks on other systems. The attack operates through the visitors’ browsers: as soon as someone visits an infected website, their device is temporarily used to send […]