HIGH/ SEPTEMBER 13, 2026TODAY’S BRIEFING — #177
Microsoft 974 patches, GitLab CVSS 10 exploited, Russia weaponizes Claude
Microsoft released 974 patches (largest batch ever); GitLab CVSS 10 flaw exploited within hours; Anthropic disrupted seven China-based labs running Claude distillation attacks and separately detected Russia-linked espionage targeting 20+ government entities.
CVE-2026-85706GitLab Community Edition and Enterprise Edition — Path traversal allowing unauthenticated file read; actively exploited in the wild; CVSS 10.0CVE-2026-84869Connectwise Screenconnect — Improper privilege management and missing authorization; actively exploited; CISA KEVCVE-2026-42016Jfrog Artifactory — Incorrect authorization leading to privilege escalation; actively exploited; CISA KEVCVE-2026-42018Jfrog Artifactory — Improper authentication returning anonymous token; actively exploited; CISA KEV
Read the full briefing →