Security news.
Today's cybersecurity landscape is heavily influenced by AI, with new reports highlighting its role in vulnerability discovery, active exploitation, and even autonomous data breaches. Apple patched a record number of CVEs, while CISA added another actively exploited vulnerability to its KEV catalog, underscoring the urgent need for robust patching and defense mechanisms.
CISA Adds Google Pixel Zero-Day to KEV Catalog
CISA has added CVE-2026-58704, a privilege escalation vulnerability in Google Pixel Cellular Modem, to its Known Exploited Vulnerabilities Catalog due to active exploitation.
Google Patches Pixel Modem Zero-Day Exploited in Attacks
Google released September 2026 security patches for Pixel devices, addressing 110 vulnerabilities including the actively exploited CVE-2026-58704 privilege escalation flaw.
Issabel Framework Flaw Under Active Exploitation
Attackers are actively exploiting CVE-2026-89026, a critical flaw in Issabel Framework that allows unauthenticated remote OS command execution due to a hard-coded credential.
Critical ConnectWise ScreenConnect Flaw Actively Exploited
CISA confirmed active exploitation of a critical-severity ConnectWise ScreenConnect vulnerability, urging immediate patching.
Acronis cPanel Backup Plugin Flaw Exploited in Attacks
A high-severity local privilege escalation vulnerability (CVE-2026-87886) in Acronis Backup plugin for cPanel and WHM is being actively exploited in the wild.
WooCommerce Wholesale Lead Capture Flaw Exploited
Threat actors are exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin to upload PHP web shells and achieve remote code execution on over 6,000 WordPress sites.
Apple Patches 273 CVEs in September 2026 Security Updates
Apple released security updates for macOS, iOS/iPadOS, visionOS, watchOS, and tvOS, addressing 273 unique CVEs, reflecting a significant increase in AI-assisted vulnerability discovery.
Unauthenticated RCE Flaws Affect 200,000+ WordPress Sites
Vulnerabilities in The Events Calendar plugin could allow unauthenticated attackers to achieve remote code execution, exposing over 200,000 WordPress sites to takeover.