CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus

Dark Reading feed covering September 2026 cybersecurity developments, including state-sponsored espionage, malware-as-a-service, phishing and fraud campaigns, AI-enabled attacks, major vulnerability disclosures, and regulatory changes. Notable items include critical GitLab path traversal CVE-2026-85706, active exploitation reported in Microsoft's September Patch Tuesday release, Sandworm exploitation of Cisco vulnerabilities to deploy Cyclops Blink, and attacks targeting Microsoft 365, Android banking users, browser-based AI agents, and enterprise supply chains.