Fortinet fixed three critical Fortinet vulnerabilities. Attackers can exploit CVE-2026-84390 and CVE-2026-26084 to access corporate data.
# USA # Fetterman
Fortinet advisories, pushed yesterday: https://www. com/psirt Security Week: Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension https://www.
Desarrollador de Linux para PS5 abandona el proyecto https:// blog.elhacker.net/2026/09/desa rrollador-de-linux-para-ps5.html
Cluster aggregates six entirely unrelated items: lawsuits over law enforcement masking, ICE vetting review, school transgender policies, measles outbreak data, ballot access litigation, and Apollo computer history. No coherent story exists.
Fortinet ZTNA portal MITM vulnerability (FG-IR-26-174) 🔗 https:// cybersecurefox.com/en/fg-ir-26 -174-mitm-vulnerability-ztna-portal-fortinet # FG -IR-26-174 # FortiOS # FortiProxy # ZTNA # CWE -295
Fortinet patched 10 flaws, including critical auth-bypass in FortiMonitorOnSight and improper authentication in Privileged Access Agent Chrome extension. Both allow unauthenticated remote exploitation.
SANS Stormcast Tuesday, September 8th, 2026: numbat; MicroTik and Magento (Adobe Commerce) 0-Day https:// isc.sans.edu/podcastdetail/100 84
The severity is increased for this new vulnerability affecting Dell Secure Connect Gateway (CVE-2026-61409) https:// vuldb.com/vuln/399549
🏛️ CISA Adds Two Known Exploited Vulnerabilities to Catalog 📝 CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog ... https://www.
Six critical and high-severity vulnerabilities disclosed: DD-WRT stack buffer overflow (CVE-2021-27137), Langflow code execution flaws (CVE-2026-0770, CVE-2026-55255), WordPress Core interpretation conflict (CVE-2026-63030), Microsoft AD FS access control gap (CVE-2026-56155), and Oracle E-Business Suite privilege escalation (CVE-2026-46817). All pose remote compromise risks.
S.
A lot of offensive activities were identified targeting GNU Binutils (CVE-2025-3198) https:// vuldb.com/vuln/303151/cti
CISA added CVE-2025-68686, a medium-severity vulnerability in Fortinet FortiOS that exposes sensitive information, to its Known Exploited Vulnerabilities catalogue. The flaw allows remote unauthenticated attackers to bypass security measures.
🔴 KRITISCH · Adobe Commerce: Codeausführung möglich CVSS: 10,0 NVD (NIST) https://www.
Unrelated reports span Pluto's 20-year reclassification anniversary (2026-08-24), an SEC probe into AI hedge fund Situational Awareness (2026-08-25), instant ramen's invention history, security updates, immigration economic effects, and RDP honeypot data released between 2026-08-24 and 2026-11-17.
Infosec.exchange publishes unrelated security stories including AI chatbot data exposure, vulnerability disclosures across web forums and mobile OS, and defensive security policy measures. Stories span multiple technology domains with no unifying incident or narrative.
Cluster contains unrelated fragments: Trump administration spending on White House renovations and tariff policy; Alaska flood alerts; religious studies post; and AI labor market research. No single story connects these reports.
CISA published six newly disclosed software vulnerabilities affecting LiteSpeed cPanel, Nx Console, TanStack, DD-WRT, Check Point SmartConsole, and Microsoft SharePoint, ranging from privilege escalation to remote code execution. These CVEs pose significant security risks to enterprise and open-source users.
Between September 8 and 11, 2026, the U.S. Cybersecurity and Infrastructure Security Agency added six critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Microsoft Windows, GitLab, JFrog Artifactory, and N-able N-central that allow remote code execution and privilege escalation. Active exploitation of these vulnerabilities has been documented.
8): unauthenticated RCE in Orkes Conductor workflow platform, actively exploited in the wild per Fortinet. 2.
Cisco Talos confirmed on September 10, 2026, that CVE-2026-20079 and CVE-2026-20316, maximum-severity vulnerabilities in Cisco Secure Firewall Management Center (FMC), were being actively exploited by state-sponsored actors, ransomware gangs, and financially motivated threat groups. CISA added CVE-2026-20079 to its Known Exploited Vulnerabilities list on September 9.
New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain access on infected Windows PCs. #hackernews #news Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain access on infected Windows PCs.
‼️🇦🇪 A threat actor is offering admin-level Fortinet SSL-VPN access into an undisclosed UAE-based hotel reservations company with reported revenue of $17 million and 1,450 network hosts, priced at $700. 💥 No delays.
21929v1 Announce Type: new Abstract: Agent skills extend coding agents with task-specific instructions, scripts, and resources, but they also create a trusted instruction channel that can be abused beyond conventional security attacks. This paper studies token amplification through skill injection: an economic resource-abuse threat in which a malicious skill causes an agent to consume substantially more tokens than needed for normal task execution.