LIVE FEED

CRITICAL: PaperCut campaign — 395 organizations exploited via AI-driven agents; Russian-speaking threat actor [10]◆CRITICAL: Mantax Otax + Gigabud — Android banking trojans target Indonesia via work profile evasion [5,6,16]◆CRITICAL: Citrix NetScaler CVE-2026-19490 — authentication bypass actively exploited; federal patch due Sept 12 [31]◆CRITICAL: Windows KB5002914 Excel update breaks copy-paste; rollback available [9]◆CRITICAL: Surfshark VPN internal breach — testing and proxy servers compromised via config error [8]◆CRITICAL: Cisco FMC (CVE-2026-20079) authentication bypass under active exploitation◆CRITICAL: BlueMoon exploit kit chains Chrome + Windows flaws; four China-linked APT groups active◆CRITICAL: AI tokens stolen via infostealer logs; Google, Anthropic, OpenAI accounts compromised◆CRITICAL: PaperCut campaign — 395 organizations exploited via AI-driven agents; Russian-speaking threat actor [10]◆CRITICAL: Mantax Otax + Gigabud — Android banking trojans target Indonesia via work profile evasion [5,6,16]◆CRITICAL: Citrix NetScaler CVE-2026-19490 — authentication bypass actively exploited; federal patch due Sept 12 [31]◆CRITICAL: Windows KB5002914 Excel update breaks copy-paste; rollback available [9]◆CRITICAL: Surfshark VPN internal breach — testing and proxy servers compromised via config error [8]◆CRITICAL: Cisco FMC (CVE-2026-20079) authentication bypass under active exploitation◆CRITICAL: BlueMoon exploit kit chains Chrome + Windows flaws; four China-linked APT groups active◆CRITICAL: AI tokens stolen via infostealer logs; Google, Anthropic, OpenAI accounts compromised◆

UPDATED DAILY

AI-monitored threat intelligence

Cyber threat
intelligence,
verified &
prioritized.

AI-generated daily briefings and vulnerability analysis for security teams who need signal, not noise.

Read Today’s Briefing → Subscribe Free

CRITICAL/ SEPTEMBER 11, 2026TODAY’S BRIEFING — #175

Android malware surge; AI-powered PaperCut campaign hits 395+ orgs

Mantax Otax and Gigabud banking trojans spread across Android, Russian-speaking actors deployed hundreds of AI agents to exploit PaperCut flaws on 395 organizations

CVE-2026-69414Microsoft Windows Defender — Zero-day exploit (ShieldCrash) published by Nightmare-Eclipse researcher CVE-2026-19490Citrix NetScaler — Authentication bypass; actively exploited; CISA KEV added 2026-09-09 CVE-2025-25249Fortinet Fortios — Heap-based buffer overflow; actively exploited; CISA KEV added 2026-09-09 CVE-2026-87491Google Chrome — Out-of-bounds write; affects Chrome, Edge, Opera; CISA KEV added 2026-09-09

Read the full briefing →

175 briefings published

25 vuln reports

59 tools indexed

$0 for security teams

LIVE — THIS WEEK

Critical vulnerabilities

Full report →

CVE	Product	CVSS	Exploited	Patch
CVE-2026-20079	Cisco Secure Firewall Management Center (FMC) And Security Cloud Control (SCC) Firewall Management	10	KEV	advisory
CVE-2026-75650	Adobe Commerce And Magento	10	KEV	✓ available
CVE-2026-49869	Kestra OSS	10	KEV	advisory
CVE-2026-83548	SonicWall SMA1000 Appliances	10	KEV	advisory
CVE-2026-21962	Oracle HTTP Server And Oracle Weblogic Server Proxy Plug-In	10	KEV	✓ available

KEV = listed in CISA catalog · IN WILD = active exploitation reported · PoC = public exploit code

LATEST INTELLIGENCE

Daily briefings

View all 175 briefings →

CriticalSeptember 11, 2026

Android malware surge; AI-powered PaperCut campaign hits 395+ orgs

Mantax Otax and Gigabud banking trojans spread across Android, Russian-speaking actors deployed hundreds of AI agents to exploit PaperCut flaws on 395 organizations

Mobile MalwareVuln ExploitCredential TheftTechnologyFinance

CriticalSeptember 10, 2026

Cisco FMC actively exploited; BlueMoon exploit kit chains Chrome & Windows; AI tokens bypass MFA

Cisco Secure FMC flaw CVE-2026-20079 under active attack; four China-linked espionage groups deployed BlueMoon exploit kit targeting Chrome and Windows; AI user accounts hijacked via infostealer logs to bypass MFA.

Vuln ExploitZero-DayCredential TheftAPTTechnology

MediumSeptember 9, 2026

Microsoft patches record 974 CVEs; AI agents steal thousands of credentials; F5 devices breached

Microsoft released 974 security patches including two actively exploited zero-days. AI-driven credential harvesting compromised thousands of accounts in six hours. F5 BIG-IP devices are being breached to deploy Linux rootkits.

Vuln ExploitZero-DayCredential TheftMalwareTechnologyFinanceRetail

MediumSeptember 8, 2026

Chrome/Edge backdoors, Magento zero-day, Microsoft 365 phishing at scale

PEEP toolkit turns Chrome and Edge into post-compromise backdoors; Magento StyleSmuggler zero-day actively exploited to deploy Linux backdoors; BigBear phishing framework bypassed MFA at 258 organizations and stole 5,000+ Microsoft 365 credentials.

Zero-DayMalwarePhishingCredential TheftTechnologyFinanceRetail

Explore by Threat Type

Volume 30d · color = momentum

Zero-Day Vuln Exploit Supply Chain Credential Theft APT Data Breach Malware Ransomware Phishing IoT / OT DDoS Insider Threat Mobile Malware BEC Compliance Cryptojacking

Sector Heatmap

Volume 30d · color = momentum

Technology Finance Government Healthcare Education Defense Manufacturing Retail Telecom Energy Legal Transportation Media

Surging Rising Steady Cooling Color = last 15 days vs prior 15 · number = briefings in 30 days

Security Tools Directory

Open full directory →

59 security tools indexed · free + paid + open source · updated regularly

🔍

Bitdefender GravityZone

Paid

Free

Paid

Freemium

SentinelOne Singularity

Paid

Free

Paid

Paid

Free

Free

Free

SIEM & Log Management

Freemium

Graylog Open

SIEM & Log Management

Free

Microsoft Sentinel

SIEM & Log Management

Paid

Splunk Enterprise Security

SIEM & Log Management

Paid

Wazuh SIEM

SIEM & Log Management

Free

Cisco Duo

Identity & Access Management

Freemium

CyberArk

Identity & Access Management

Paid

Keycloak

Identity & Access Management

Free

Okta

Identity & Access Management

Paid

Paid

Free

Freemium

Paid

Vulnerability Management

Free

OpenVAS (Greenbone)

Vulnerability Management

Free

Qualys VMDR

Vulnerability Management

Paid

Rapid7 InsightVM

Vulnerability Management

Paid

Tenable Nessus

Vulnerability Management

Paid

Paid

Free

Free

Paid

Threat Intelligence Platforms

Freemium

MISP

Threat Intelligence Platforms

Free

OpenCTI

Threat Intelligence Platforms

Free

Recorded Future

Threat Intelligence Platforms

Paid

Acronis Cyber Protect

Backup & Disaster Recovery

Paid

Restic

Backup & Disaster Recovery

Free

Veeam Backup

Backup & Disaster Recovery

Paid

GoPhish

Security Awareness Training

Free

KnowBe4

Security Awareness Training

Paid

Phished

Security Awareness Training

Freemium

Paid

Freemium

Paid

Free

Cloudflare Zero Trust

VPN & Zero Trust Network Access

Freemium

Tailscale

VPN & Zero Trust Network Access

Free

WireGuard

VPN & Zero Trust Network Access

Free

Zscaler Private Access

VPN & Zero Trust Network Access

Paid

Burp Suite

Penetration Testing & Red Team

Free

Kali Linux

Penetration Testing & Red Team

Free

Metasploit

Penetration Testing & Red Team

Freemium

Nmap

Penetration Testing & Red Team

Free

sqlmap

Penetration Testing & Red Team

Free

Paid

Free

Paid

⚖️ Compare any tools side-by-side →

Pick up to 4 tools to compare pricing, deployment, and capabilities

ABOUT THIS SITE

How It Works

Our methodology →

We monitor

Once a day at 04:00 UTC, the pipeline pulls ten authoritative security feeds – including CISA advisories – and extracts the day’s most important stories and the CVEs they cite.

We verify

Every CVE is checked against NVD for canonical CVSS and cross-referenced with the CISA KEV catalog. Inline citations link each story to its sources, and a skeptical second AI pass flags – or blocks – claims it can’t substantiate.

You act

Severity is scored from CVSS and confirmed exploitation – not editorial tone – so Critical is rare by design. Structured briefings tell your team exactly what to patch, investigate, or escalate.

Get the Daily Briefing in Your Inbox

Join security professionals who start their morning with defend.network intelligence. Free forever.

Cyber threatintelligence,verified &prioritized.

Android malware surge; AI-powered PaperCut campaign hits 395+ orgs

Critical vulnerabilities

Daily briefings

Android malware surge; AI-powered PaperCut campaign hits 395+ orgs

Cisco FMC actively exploited; BlueMoon exploit kit chains Chrome & Windows; AI tokens bypass MFA

Microsoft patches record 974 CVEs; AI agents steal thousands of credentials; F5 devices breached

Chrome/Edge backdoors, Magento zero-day, Microsoft 365 phishing at scale

Explore by Threat Type

Sector Heatmap

Security Tools Directory

How It Works

We monitor

We verify

You act

Get the Daily Briefing in Your Inbox

Cyber threat
intelligence,
verified &
prioritized.