What’s new in Microsoft Security: September 2026
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post
CVE-2026-100746
Medium Severity Description A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect
CVE-2026-100865
High Severity Description Heym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition evaluator uses Python eval()
CVE-2026-100864
High Severity Description heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine’s DotList map/filter and
Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks
Citrix NetScaler administrators are confronting reports of two undisclosed remote code execution vulnerabilities allegedly exploited in real-world attacks.
RHSA-2026:72199: Critical: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
CVE-2026-97163
Critical Severity Description Joomla Extension – lomart.fr – Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVE-2026-97162
High Severity Description Joomla Extension – lomart.fr – Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVE-2026-97161
Critical Severity Description Joomla Extension – lomart.fr – Various path traversal / file access vectors in UP plugin
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a
DSA-6519-1 swift – security update
https://security-tracker.debian.org/tracker/DSA-6519-1