[HIGH] – Check Point Reports Cross-Account ChatGPT Data-Leakage Channel
Check Point demonstrated a prompt-driven ChatGPT channel that could relay connected-app data across accounts.
[CRITICAL] – SAP Releases Fix for CVE-2026-44756 EPP Memory Corruption
SAP's September security updates address a CVSS 10.0 Extended Passport Processing memory-corruption vulnerability.
[CRITICAL] – FreeIPA Flaw Enables Unauthenticated Administrator Access
A critical FreeIPA flaw can give an unauthenticated LDAP client administrator-group membership.
[CRITICAL] – Sangoma Switchvox RCE Added to CISA KEV After Active Exploitation
CISA-listed, actively exploited Switchvox SQL injection can enable unauthenticated remote code execution.
[CRITICAL] – Microsoft Patches Two Actively Exploited Windows Elevation Flaws
Microsoft addressed two Windows privilege-escalation flaws that CISA added to the KEV Catalog on September 8.
[HIGH] – Berlin Investigates Newly Published Credentials and Government-Breach Data
Berlin says newly released breach data includes login credentials; officials are assessing affected systems and people.
[HIGH] – New Linux HAProxy Backdoor Toolkit Targets South Korean Organizations
Rapid7 details a stealthy Linux toolkit targeting South Korean automotive and media organizations.
[CRITICAL] – StyleSmuggler Active Magento and Adobe Commerce Zero-Day RCE
Sansec reports active exploitation of an unauthenticated Magento and Adobe Commerce code-execution chain.
[HIGH] – Boston Scientific Reports Recovery Progress After Cybersecurity Incident
Boston Scientific reports recovery progress and no new unauthorized activity after its August cybersecurity incident.
[HIGH] – VMware Workstation and Fusion Host-Execution Flaws Patched
Broadcom patched VMware flaws that can let a guest VM administrator execute code on the host.