| intel | — | CISA Kills Its Own Weekly Vulnerability Bulletin on Sept 28: The CVSS-Ranked List Is Dead, Risk Wins |
| tutorials | — | Docker Socket Hardening: Stop Mounting Root-Equivalent Into Every Container |
| tutorials | — | A Honeypot on a Spare VLAN: Cowrie + CISA's New Decoys Playbook |
| exploits | High | Your Backup Agent Can Root Your cPanel Box — And Someone Already Did (Acronis CVE-2026-87886)ExploitedKEV 19 SEP 2026CVE-2026-87886 |
| exploits | Critical | The Gatekeeper Is the Door: One Unauthenticated API Call to Root on Cisco ISE (CVE-2026-76460)ExploitedKEV 19 SEP 2026CVE-2026-76460 |
| hardware | — | Orange Pi Zero 4: A733 + PCIe NVMe + GbE in a 55×50 mm Board, From $26.50 |
| tutorials | — | Camera VLAN With No Internet Route: The Firewall Rules That Let Cameras Call Nobody |
| intel | High | CareCam CM2507: Seven CVEs, Live Video With No Login, And a Vendor Who Won't Pick UpCVE-2026-88259 +6 |
| intel | High | Your NVR's Admin Password, In Plaintext, To Anyone Who Can Reach It (Digital Watchdog VMAX)CVE-2026-68953 +5 |
| intel | Moderate | Your $50 PoE Camera's Bootloader Has a Hard-Coded Password (CVE-2026-85083)CVE-2026-85083 |
| exploits | Critical | One Crafted Email = Root on Your Cisco Mail Gateway (CVE-2026-76461)ExploitedKEV 17 SEP 2026CVE-2026-76461 |
| hardware | — | QNAP's TS-h966TX Puts a Thunderbolt 4 Editing Volume and a ZFS NAS in One Box |
| exploits | Critical | GitLab's CVSS-10 File Read Needs No Login — and the Scanners Are Already Knocking (CVE-2026-85706)ExploitedKEV 14 SEP 2026CVE-2026-85706 +2 |
| tutorials | — | Headscale v0.29: Reach Your Homelab From Anywhere Without Opening a Port (and Survive the Breaking Upgrade) |
| exploits | Critical | JFrog Artifactory: Three Chained Flaws Turn an Unauthenticated Request Into Admin — and a Rust Backdoor Survived the PatchExploitedKEV 25 SEP 2026CVE-2026-42018 +2 |
| intel | Moderate | Three Agencies vs. Six Chinese AI Companies: 'Industrial-Scale' Distillation of US Frontier Models (AA26-251A)Exploited |
| hardware | — | The A733 Finally Gets Real Storage: ArmSoM Sige6 Puts 128GB of eMMC and an NVMe Slot in a $119 Credit-Card Board |
| exploits | Critical | MikroTrick: An LLM Found Six RouterOS Flaws That Chain Into a Free Admin Account — Patch Before Sep 13ExploitedKEV 13 SEP 2026CVE-2026-67276 +5 |
| exploits | High | A 'Medium' Severity Zero-Day That Someone Is Actually Exploiting: Chrome V8's CVE-2026-87491ExploitedKEV 23 SEP 2026CVE-2026-87491 +6 |
| exploits | Critical | Your NetScaler Just Handed Out Free VPN Passes to Anyone on the Internet: CVE-2026-19490 Is on KEVExploitedKEV 12 SEP 2026CVE-2026-19490 +2 |
| tutorials | — | The Travel Router That Tunnels Home: GL.iNet + WireGuard on Hostile Wi-Fi |
| exploits | Critical | N-central's Pre-Auth RCE Zero-Day: The Vendor Says 'No Confirmations' — and Publishes the Scanners' IP RangeExploitedKEV 11 SEP 2026CVE-2026-86218 +4 |
| exploits | High | PostGREShell: The 'Backup' Account That Opens Every Door in PostgreSQL (CVE-2026-6471)CVE-2026-6471 +1 |
| hardware | — | Ubiquiti USW-Pro-XG-10-PoE: One U of 10GbE That Carries Your Whole Rack |
| tutorials | — | Frigate + Home Assistant: An NVR That Never Touches the Cloud |
| exploits | Critical | The VPN That Signed You In as Root: IXON's Unauthenticated Config Endpoint and CVE-2026-75925CVE-2026-75925 |
| tutorials | — | SSH the Grown-Up Way: Certificate Auth, No Passwords, Revocable Access |
| intel | High | My Homelab Got Hacked: The Forgejo RCE That Took 45 Minutes to Plan and Three Seconds to Pull OffExploitedCVE-2026-60004 |
| hardware | — | 400GbE for the Basement: The MikroTik CRS804-4DDQ-hRM Is the Cheap On-Ramp to a Terabit Backplane |
| hardware | — | QNAP's $549 Switch Is the 2.5GbE Backbone Your Cat5e Has Been Waiting For |
| tutorials | — | Home Assistant 2026.9: Stop Seeing 127.0.0.1 in Your Invalid-Login Alerts |
| intel | — | METR Blew $600K of Free AI Credits on One Fail-Open Auth Bug (Their Own Postmortem) |
| intel | — | Nexus: A Dark-Web Shop Sold 153M Driver's Licenses — and the Timestamps Point at a Rental Car Counter |
| exploits | High | Chrome's array.sort() Hides a Zero-Day That's Already in the Wild: CVE-2026-85046 Lands on KEVExploitedKEV 18 SEP 2026CVE-2026-85046 +5 |
| exploits | High | A Blank Field Is Not a Permission List: Ignition's Default Gives Project Creation to Any Logged-In UserCVE-2026-77393 |
| hardware | — | MNT Station: The Fanless Aluminum Box Where You Buy the Shell Once and Swap CPUs Forever |
| intel | — | CISA + G7 Publish a Post-Quantum Call to Action: Harvest-Now-Decrypt-Later Is Officially on the Clock |
| intel | — | OpenAI's ExploitGym Swarm: How ~700 Rogue Agents Broke Hugging Face Through an Artifactory Message BoardExploited |
| tutorials | — | Immutable + Offsite Backups on a Budget: restic + rclone, So Ransomware Can't Delete Its Own Insurance |
| hardware | — | The $1 Laptop OS Just Grew Up: Haiku R1/beta6 Brings Official Firefox, Real Virtualization, and a Go Port |
| exploits | High | LiteLLM's MCP Endpoint Trusted Any Bearer Token It Was Handed: One Header, Full Tool AccessExploitedKEV 16 SEP 2026CVE-2026-59822 +1 |
| exploits | Critical | SonicWall's SMA1000 VPN Boxes Skip the Password Entirely: Pre-Auth SSRF Chains to Unauthenticated RCEExploitedKEV 05 SEP 2026CVE-2026-83548 +1 |
| tutorials | — | One Login for Everything: Caddy Forward Auth in Front of Every Self-Hosted AppCVE-2026-40172 |
| exploits | — | Fire Ant Trades Hypervisors for the Trust Layer: tac_plus Injection and Cisco Routers Turned Sniffers |
| intel | — | HOOKEDGE: How a State Actor Ran Six Months of Espionage on Batch Scripts, webhook.site, and Headless Edge |
| hardware | — | Arduino Ventuno Q: $299 for Two Brains — One Runs LLMs, the Other Moves Servos |
| exploits | High | Your MikroTik Router Is a Brute-Force Target, and There's No Patch — YetCVE-2026-16347 |
| exploits | Critical | UniFi Shipped Three Perfect Tens at Once — Patch the OS Before Anything ElseCVE-2026-77537 +9 |
| intel | — | The 'Fang Fang' Files: 150 Pages of a CCP Honeypot, a Freshman Congressman, and a Case That Vanished |
| tutorials | — | Were You a Proxy? Grep Your DNS Logs Against the QTFY IOC List |
| exploits | Critical | The $63 Print Server With Two Unauthenticated 9.8s: Xiiaozet LK100W, CISA ICSA-26-239-01CVE-2026-78239 +2 |
| exploits | Critical | CISA Slaps a 9.8 on the Serial Server Next to Your 3D Printer: Ebyte NA111-M, 13 CVEs, Six of Them CriticalCVE-2026-73125 +12 |
| hardware | — | Minisforum MS-03: Triple 10GbE, 13 Watts of Idle, and the MS-01 Successor That Actually Arrives |
| intel | Moderate | The IoT Botnet That Hid Chinese State Hacks Is Dead — And Your Camera Might Have Been Its ProxyExploited |
| intel | High | A Tale of Two SOCs: CISA Ran the Same Red Team at Two Critical-Infrastructure Orgs — One Detected It, One Never Did |
| hardware | — | The DEF CON 34 Badge Is an Open-Source FIDO2 Key — and It's Already Been Cracked |
| intel | High | #StopRansomware: Gunra — The Conti-Child Whose Backup Advice Is Aimed Right At UsExploitedCVE-2024-55591 +1 |
| exploits | Critical | PaperCut's Zero-Day Is Being Exploited Right Now: Every Version Is Exposed, and the Patch Race Is the Real StoryExploitedCVE-2026-82078 +3 |
| tutorials | — | The Restore Drill: Prove Your restic Backups Are Real Before Ransomware Does It For You |
| intel | Moderate | UAT-10147: The Commodity Crime Gang That Hired AI Pentesters (And Wrote a Rootkit While It Was At It)ExploitedCVE-2022-27925 +11 |
| exploits | Moderate | Your authentik 'Helpdesk' Admin Might Be Superuser: CVE-2026-40172 (Not KEV, But Patch It)CVE-2026-40172 |
| intel | Moderate | CISA's Annual Review: Most Exploited Flaws 'Should Have Been Eradicated Decades Ago'Exploited |
| exploits | Critical | Citrix Calls It a DoS. Researchers Call It Pre-Auth RCE. Your NetScaler Is on KEV Either WayExploitedKEV 29 AUG 2026CVE-2026-8452 +1 |
| intel | — | One €5 Domain, 400,000 Military Phone Calls |
| exploits | Critical | Gitea's diffpatch Endpoint Turns Any Repo Writer Into Root: Patch It Today, CVE-2026-60004 Is on KEVExploitedKEV 28 AUG 2026CVE-2026-60004 |
| intel | — | Declassified NSA Memo: The Deputy Director Blocked an Election-Threat Report to Avoid the 'Deep State' Label |
| exploits | Critical | ownCloud's Three-Year-Old Auth Bypass Is Finally in the Wild: CVE-2023-49105 Lands on KEVExploitedKEV 30 AUG 2026CVE-2023-49105 +1 |
| hardware | — | Pine64 Pauses All Linux Production: The AI Boom Just Ate Your SBC |
| intel | High | Five Agencies: Someone Is Pointing AI at Your Siemens PLCs (AA26-231A), Explained for Non-OT PeopleExploited |
| exploits | High | The Fourth afd.sys Zero-Day: Windows' Sock Drawer Keeps BleedingExploitedCVE-2026-68820 +4 |
| intel | Moderate | FSB Center 16 Is Hunting Your Home Router — And CISA Wants You to Act Like ItExploited |
| intel | Moderate | Your Water Was Nearly Next: The Iran Joint Advisory, Explained for Non-OT PeopleExploited |
| tutorials | — | The 10-Minute Router Hygiene Drill (Nation-State Grade) |
| exploits | Critical | VMware vCenter Gets Ransomed Again: CVE-2026-59310 Lands on KEVExploitedCVE-2026-59310 |
| hardware | High | Coldcard's Keygen Flaw: Your 'Offline' Wallet Wasn't Quite OfflineExploited |
| hardware | — | The $4 Microcontroller Is Eating Retro Computing Whole |
| hardware | — | Flipper Zero Goes Indie: The Community Era Begins |