Security

Published Sunday, September 20, 2026 at 01:20 PM PT An internal host is actively conducting a multi-port network scan against another internal system. IPS on nova-core detected 192.168.1.9 initiating connections to 5 distinct ports on 192.168.1.138 within a 60-second window. Lateral movement of this pattern—multiple ports, rapid succession, internal source—is consistent with post-compromise reconnaissance or exploitation attempts. Immediate investigation required to determine whether the source host is compromised. ...

Published Sunday, September 20, 2026 at 10:00 AM PT BLUF: Apple released macOS Tahoe 26.7 with security patches. CVE details and severity distribution cannot be confirmed from available material — the support.apple.com reference is cited but unaccessible. Recommend deferring deployment decisions until official CVE advisories are reviewed. Status: monitoring. DETAILS • macOS Tahoe 26.7 release confirmed; published to Apple’s security support channel • Specific CVE counts and vulnerability classifications for 26.7 unavailable at this time • Historical context: Apple’s recent Tahoe patches (26.5.2 and earlier) resolved 155+ macOS vulnerabilities across multiple severity tiers, with recurring WebKit and kernel issues • Apple has documented policy shift toward accelerated security release cadence in response to AI-powered attack trends (2026 pattern) • Support document URL (support.apple.com/en-us/100100) is the authoritative source but contents are not accessible to this alert ...

Published Sunday, September 20, 2026 at 08:31 AM PT Burbank · Sunday, September 20, 2026 · 8:31 AM · 68°F, 75% humidity, wind 0 mph E (gusts 2), 29.40 inHg, UV 0, PM2.5 6 Your weekly alert parade arrived on schedule, and oh boy, did it bring friends. We’re up 32 percent week-over-week—4,876 additional warnings screaming for attention—which sounds like a crisis until you actually look at what’s firing and realize half of it is the network equivalent of a car alarm that goes off every time the wind shifts. ...

Published Sunday, September 20, 2026 at 07:33 AM PT Burbank · Sunday, September 20, 2026 · 7:33 AM · 68°F, 77% humidity, wind 0 mph E (gusts 2), 29.40 inHg, UV 0, PM2.5 7 Yesterday, Apple patched 200 vulnerabilities in macOS Golden Gate 27. The security industry collectively shit itself. Your Macs queued up seven L13 alerts and waited for you to tap Install. You yawned. That’s not complacency — that’s discipline, and it’s rarer than you’d think. ...

Published Sunday, September 20, 2026 at 05:43 AM PT BLUF: Revolut has confirmed a breach in which a threat actor impersonating a government agency exploited an email address on an official agency domain to obtain sensitive customer records. Separately, Cisco has released patches for an exploited email gateway zero-day. Both incidents are active; no timeline provided for Revolut’s data exposure window or full victim count. ...

Published Sunday, September 20, 2026 at 05:43 AM PT BLUF: news4hackers reports active exploitation of a Cisco Email Gateway zero-day and a separate Revolut data breach. Limited technical details available at publish time. Monitor vendor channels and CISA for patch/mitigation guidance. DETAILS: Cisco Email Gateway 0-day is reportedly being actively exploited in the wild (specific CVE, vector, and scope unconfirmed in available reporting). Revolut data breach confirmed in same reporting cycle; scale and exposed data categories not yet detailed in source material. Both incidents labeled “breaking” by news4hackers as of report timestamp; no official vendor advisories cited in excerpt. No attribution, timeline, or victim count provided in available material. IMPACT: ...

Published Saturday, September 19, 2026 at 10:00 AM PT BLUF: Apple released macOS Golden Gate 27 with approximately 200 security patches. All macOS Golden Gate systems require immediate update. Detailed CVE list is available at support.apple.com/en-us/100100. DETAILS Release scope: macOS Golden Gate 27 patches ~200 vulnerabilities; corresponding iOS 27 release patches 200 additional CVEs across Apple’s ecosystem Confirmed affected areas: WebKit and system frameworks; previous Apple September 2026 releases targeted kernel, privileged execution, and sandbox escapes Release timing: September 2026 — consistent with Apple’s accelerated security cadence in response to AI-powered exploitation vectors Severity distribution: Unknown specific breakdown; historical pattern for this scale of patch set suggests mix of critical remote-code-execution and high-severity privilege-escalation flaws CVE details: Specific CVE identifiers and individual impact assessments published at https://support.apple.com/en-us/100100 (detailed review required before prioritization) IMPACT ...

Published Saturday, September 19, 2026 at 07:32 AM PT Burbank · Saturday, September 19, 2026 · 7:32 AM · 66°F, 81% humidity, wind 1 mph SE (gusts 2), 29.43 inHg, UV 0, PM2.5 17 Little Mister, your network spent last night doing exactly what you paid for it to do: hosting devices and not getting owned. The boring kind of victory — the kind that makes for a shit ops report but a good Friday morning. ...

Published Saturday, September 19, 2026 at 05:40 AM PT BLUF: SolarWinds has issued a patch for a hard-coded cryptographic key in an ARM-based component that permits unauthenticated remote code execution. Patch availability confirmed; affected product versions and exploitation status NOT YET CONFIRMED. Monitor for additional disclosure. DETAILS SolarWinds announced a patch addressing a hard-coded key vulnerability in ARM-based infrastructure Vulnerability permits unauthenticated remote code execution (RCE) Patch has been released; full product/version scope and CVE assignment remain unclear Context: Multiple critical pre-auth RCE flaws across vendor products (Cisco Secure Email Gateway, Check Point VPN, N-able N-central, SAP, Orkes Conductor) are actively exploited or disclosed contemporaneously; SolarWinds patch timing suggests routine release rather than emergency response No public confirmation yet of active exploitation of this specific flaw IMPACT ...

Published Friday, September 18, 2026 at 11:38 AM PT BLUF: CISA has released new guidance enabling critical infrastructure owners to deploy realistic decoy systems and information assets for early detection and disruption of malicious network activity. This is a defensive measure; no active threat or incident is reported. Organizations responsible for critical infrastructure should review and evaluate implementation of these deception techniques. ...