September 25, 2026
Cyber Security Week in Review: September 25, 2026
In brief: Threat actors are exploiting a Roundcube Webmail flaw; North Korean hackers target Ukraine; and more.
18 min read
Vulnerability Intelligence Services
Real-time Actionable Vulnerability Intelligence
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoKey Metrics
75,406
Software vendors monitored
Continuously updated
1,321
Avg vulnerability reports processed daily
+2,597 today
25,500
Security Bulletins released in 2026
+3,588 this month
1,003
Zero-days recorded since 2006
+83 this year
Latest Security News
September 24, 2026
OpenAI agents exploit security weakness in Australian government portal
Australian Prime Minister Anthony Albanese said the incident involved a Medicare statistics portal operated by Services Australia.
2 min read
September 23, 2026
Arista Networks and F5 release security fixes for actively exploited zero-day flaws
Users are advised to apply security updates as soon as possible.
2 min read
September 23, 2026
EvilTokens phishing service used to steal access to Microsoft 365 accounts disrupted in joint effort
The service was used to compromise around 12,000 email accounts across more than 10,000 organizations worldwide.
2 min read
September 23, 2026
North Korean hackers target Ukraine via malicious LNK lures
The campaign appears focused on organizations and individuals connected to Ukraine, with the goal of collecting intelligence about the future direction of the Russia-Ukraine war.
2 min readFeatured Security Bulletins
View vulnerability databaseCode
Security Bulletin
Severity
Status
Date
SB20260925261
Medium
Patched
Sep 25, 2026
SB20260925256
Multiple vulnerabilities in ServiceNow AI Platform
CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, and 2 more
CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, and 2 more
Medium
Patched
Sep 25, 2026
SB20260925254
Low
Patched
Sep 25, 2026
SB20260925253
Medium
Patched
Sep 25, 2026
SB20260925252
Medium
Patched
Sep 25, 2026
SB20260925251
Multiple vulnerabilities in Elasticsearch
CVE-2026-94396, CVE-2026-94397, CVE-2026-94399, and 4 more
CVE-2026-94396, CVE-2026-94397, CVE-2026-94399, and 4 more
Low
Patched
Sep 25, 2026
SB20260925250
Low
Patched
Sep 25, 2026
SB20260925243
Medium
Patched
Sep 25, 2026
SB20260925242
Low
Patched
Sep 25, 2026
SB20260925241
Medium
Patched
Sep 25, 2026