HIGH/ SEPTEMBER 23, 2026TODAY’S BRIEFING — #187
Check Point, WordPress, Zyxel actively exploited; EvilTokens phishing infrastructure seized
Check Point Security Management Server zero-day (CVE-2026-93616) actively exploited in targeted attacks. WordPress patched critical RCE flaw in v7.1.2. Microsoft disrupted EvilTokens phishing service compromising 12,000+ Microsoft 365 inboxes. Zyxel GS1900 switch exploits targeting government data.
CVE-2026-93616Check Point Security Management Server — Unauthenticated script execution; [exploitation unverified] in targeted attacks July 23CVE-2026-90898Bifrost AI Gateway — Unauthenticated remote command execution (CVSS 9.8) affecting 20+ LLM providersCVE-2026-7273Zyxel GS1900 Smart Managed Switches — Stack-based buffer overflow actively exploited; CISA KEV added Sept 21, federal deadline Sept 24
Read the full briefing →