September 2026

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution 2026-09-09 at 12:20 By SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application The vulnerability, tracked as CVE-2026-44756 (CVSS […]

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox 2026-09-09 at 12:11 By Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug […]

Security’s Most Influential People in Security 2026 2026-09-09 at 12:00 By The 2026 Most Influential People in Security have shaped the future of security and risk management through leadership, innovation and commitment to progress across the industry. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Jennifer Moore — Most Influential People in Security 2026 2026-09-09 at 12:00 By Jennifer Moore’s extensive career in security began with the Federal Bureau of Investigation (FBI). This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Eric Sean Clay — Most Influential People in Security 2026 2026-09-09 at 12:00 By Eric Sean Clay discusses his career path throughout the security industry. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root 2026-09-09 at 11:19 By cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack […]

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans 2026-09-09 at 10:36 By Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When Apache loads any […]

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days 2026-09-09 at 10:13 By Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office […]

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild 2026-09-09 at 07:27 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by September 11, 2026. The vulnerability […]