[MEDIUM] – ENISA Launches CRA Reporting Platform for Exploited Vulnerabilities
ENISA's new CRA portal centralizes manufacturer reporting of actively exploited vulnerabilities and severe incidents.
[MEDIUM] – Microsoft Confirms RDS Failures After September Security Updates
Microsoft confirms September security updates can disrupt Remote Desktop Services and supplies Known Issue Rollback policies.
[HIGH] – Telus Notifies Customers of Multi-Month Account Breaches
Telus says compromised credentials were used to access customer account records between February 2025 and June 2026.
[HIGH] – Revolut Discloses Customer Data Exposure Through Government Impersonation
Revolut says a government-domain impersonation scheme obtained sensitive records for a limited number of customers.
[HIGH] – Dutch NCSC Warns of Critical Check Point VPN Flaws
Dutch NCSC urges rapid remediation of two critical Check Point VPN vulnerabilities and predicts exploitation attempts.
[MEDIUM] – CISA Releases Updated Insider Threat Mitigation Guide
CISA released an updated guide for organizations developing or improving insider-threat mitigation programs.
[MEDIUM] – Surfshark Discloses Breach of Misconfigured Internal Test Server
Surfshark says an unauthorized party accessed a misconfigured internal test server; customer data and VPN services were unaffected.
[CRITICAL] – GitLab Releases Critical Patch for CE and EE
GitLab released 19.3.2, 19.2.6, and 19.1.8 with critical security fixes for self-managed installations.
[HIGH] – Trezor Warns of Phishing After Email-Provider Breach
Trezor says attackers breached its email provider and sent phishing messages from its legitimate domain.
[HIGH] – Veradigm Discloses Vendor-Credential Data Exposure
Veradigm says stolen vendor credentials were used to download patient personal data, including some Social Security numbers.