Cyber Threat Pulse

• Patch now: Update RouterOS to the latest stable version via admin interface or ISP.
• Restrict access: Block SSH and management interfaces from...

Texas Mutual Insurance Company notified the Texas AG of a breach affecting 2,065 state residents plus others nationwide, exposing SSNs, medical data,...

Trend Micro's September 10 update introduces detection rules for newly tracked vulnerabilities affecting identity infrastructure, AI/ML platforms, and...

Critical unauthenticated RCE flaws in Check Point VPN products require urgent perimeter action.

• Identify exposed gateways using Site-to-Site or...

Hilltop Bank has begun phased recovery from its cybersecurity incident with targeted service reopenings.

• Select branches active: Five offices now...

Cisco confirms active exploitation of two FMC vulnerabilities by Sandworm and Qilin operators, requiring urgent exposure validation.

-...

Hackers deploying hundreds of AI agents against PaperCut NG/MF zero-days points to faster, larger-scale exploitation of enterprise print systems, with detection requirements likely shifting for IR teams.

DireWolf claims system access on its extortion site, yet eAssist has not confirmed any data compromise.

• Investigation focus: Determine if patient or...

ShinyHunters claims to have stolen over 200,000 Florida DMV records—including names, SSNs, and driver’s license data—via a password-reset flaw that...

Four nation-state actors rapidly adopted the BlueMoon Chrome+Windows exploit kit within 12 days of first use on 28 August, shrinking the window for...

• Emergency Patching: Prioritize immediate remediation for CVE-2025-14733 across Fireware OS 11.x, 12.x, and 2025.1-2025.1.3, as CISA mandated federal...

Healthcare organizations face growing third-party risks as vendor access expands into clinical workflows, with 30% of breaches now involving external...

Security tool misconfigurations triggered breaches or near-misses at 97% of organizations last year, with firewalls driving 42% of incidents.

-...

Healthcare faces escalating dual-impact attacks: third-party breaches exposing patient data alongside operational disruptions risking care.

-...

• Credibility check: FBI is actively investigating Nexus dark-web claims of selling 153 million+ U.S. and Canada driver's licenses plus 10M+ IDs, but...

Google warns of a new Chrome zero-day bug exploited in attacks.

CVE-2026-45659, a CVSS 8.8 deserialization flaw in on-premises SharePoint Server, is now confirmed in ransomware attacks via CISA's KEV catalog.

-...

Microsoft's record 974-patch release demands targeted IR focus over blanket deployment.

• Exploited zero-days first: CVE-2026-85880 (ALPC heap...

Stadtwerke Landsberg quickly isolated its encrypted IT network, kept essential services online, and launched a forensic probe after the September 1...

• Apply 2026.3 HF4 hotfix immediately on all on-premises N-central instances
• Audit admin accounts and review remote management activity for...