Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

bitsight

From CVE Disclosure to Internet-Wide Exposure: How Bitsight Uses AI to Accelerate Product Fingerprinting

Sep 16, 2026 By Greg Keshian In BitSight
When a new CVE drops, getting notified is the easy part. The real challenge comes right after. Depending on how your organization is set up, different teams have to scramble to figure out if you're actually using the affected product, which specific versions are exposed, whether it's lurking anywhere in your subsidiaries or vendor ecosystem, and how urgently you need to patch it.
Read Post
cycognito

Emerging Threat: (CVE-2026-70756) Oracle WebLogic Server Takeover via T3 and IIOP

Sep 16, 2026 By Igal Zeifman In CyCognito
CVE-2026-70756 is a vulnerability in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware. An unauthenticated attacker with network access over the T3 or IIOP protocols can compromise the server and take full control of it. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical). Oracle rates it as easily exploitable, with no privileges and no user interaction required. Confidentiality, integrity, and availability impacts are all rated high.
Read Post
WatchGuard

More Vulnerabilities Are Being Found Than Ever Before. That's Good News.

Sep 16, 2026 By Tracy Hillstrom In WatchGuard
If you've glanced at a vulnerability tracker lately, the numbers look alarming. The Forum of Incident Response and Security Teams (FIRST) now projects roughly 66,000 CVEs will be published in 2026; up from a February forecast of 59,427 and closing in on 70,000 by some counts. That would follow a record 2025, which finished at roughly 48,000 disclosed CVEs, itself a sharp climb from about 40,000 the year before. It's tempting to read that curve as a sign that software is getting worse. It isn't.
Read Post
Arctic Wolf

UPDATE: Active Exploitation CVE-2026-32996 of Veeam Agent

Sep 16, 2026 By Arctic Wolf In Arctic Wolf
On September 14, 2026, public technical details and proof-of-concept (PoC) exploit code were released for CVE-2026-32996, increasing the likelihood of exploitation attempts against affected Veeam Agent for Microsoft Windows deployments. CVE-2026-32996 is a local privilege escalation vulnerability in Veeam Agent for Microsoft Windows version 13.0.1.2067 and affects all earlier version 13 builds.
Read Post
When Broken Links Become Security Vulnerabilities

When Broken Links Become Security Vulnerabilities

Sep 16, 2026 By SecuritySenses In SecuritySenses
Imagine a link on your website stops working. You notice the problem, add it to your backlog, and move on. A few months later, the link starts working again. At first glance, that sounds like good news. In reality, it could mean that someone else now controls the destination. Fortunately, this is not what usually happens. In most cases, a broken link is simply a maintenance issue. A page has been moved, deleted, or renamed. Visitors encounter an error, someone eventually fixes the link, and the story ends there.
Read Post
astra

Chaining Vulnerabilities into Attack Vectors with Autonomous Pentesting

Sep 15, 2026 By Keshav Malik In Astra
Your vulnerability report is sorted by severity. The adversary looking at the same environment is sorted by path. That mismatch is the whole problem. Open any scanner output, and you get a tidy hierarchy: criticals at the top, then highs, then a long tail of mediums and lows that most teams will never touch. To the person who wrote the ticket, that tail is noise. To someone who thinks in chains, it’s a roadmap. A page of “lows” is not a page of things you can ignore.
Read Post
nucleus

How AI Changes Exposure Management: From Static Findings to Continuous Risk Decisions

Sep 15, 2026 By Rob Gibson In Nucleus
Every security team knows the feeling. The quarterly vulnerability scan completes. The report lands, with thousands of findings, color-coded by CVSS severity, neatly timestamped. And the moment it’s printed, it’s already out of date. That is the fundamental flaw at the heart of traditional exposure management: it is built around a point in time.
Read Post
cycognito

Emerging Threat: (CVE-2026-76461) Cisco Secure Email Gateway Root RCE via Email Parsing

Sep 15, 2026 By Igal Zeifman In CyCognito
CVE-2026-76461 is a SQL injection vulnerability in the email parsing logic of Cisco AsyncOS Software for Cisco Secure Email Gateway, caused by insufficient validation of message content before it reaches a database query. An attacker who sends a crafted email message containing SQL statements can have those statements executed by the appliance as it processes the message. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical).
Read Post
Arctic Wolf

CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Zero-Day Vulnerability Immediate Mitigation Required

Sep 15, 2026 By Arctic Wolf Labs In Arctic Wolf
CVE-2026-76461 is a pre-authentication SQL injection vulnerability in the email parsing logic of Cisco Secure Email Gateway (AsyncOS). This vulnerability enables unauthenticated remote threat actors to execute arbitrary code as root by sending crafted, malicious emails. This grants threat actors full control over the operating system, allowing data exfiltration, email surveillance, persistent access, and potential network pivoting, all without user interaction or credentials.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.