https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 12:55:17 +0000 https://vulnerability.circl.lu/sighting/c51b0323-6388-4b06-a305-7ecb9f8eb351/export {"uuid": "c51b0323-6388-4b06-a305-7ecb9f8eb351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50461", "type": "seen", "source": "https://gist.github.com/ichintu/6e4365e719efc73cff29fb6a2ec0065b", "content": "**September 14, 2026 Cyber Threat Intelligence Digest**\n\nThis briefing highlights critical vulnerabilities, AI-driven security shifts, and industry insights:\n\n\u2022 **Active Threats & Vulnerabilities:** A CVSS 9.9 OS command injection flaw (CVE-2026-90699) affects the D-Link DWR-M920 with public exploits. NCSC/CISA warn of active exploitation of a critical GitLab path traversal (CVE-2026-85706). ~2.6 million MikroTik routers expose public services, and an authenticated TYPO3 extension flaw (CVE-2023-50461, CVSS 8.8) enables arbitrary code execution. Separately, a malicious Twitch browser extension leaked OAuth tokens for ~31,000 users to a Russian bot service.\n\n\u2022 **AI & Patching Dynamics:** Microsoft\u2019s September update addresses ~972 vulnerabilities, largely uncovered by AI scanning. While AI accelerates detection, it also compresses patch windows as exploits are rapidly reverse-engineered from new releases.\n\n\u2022 **AI Governance & Leadership:** The 3M ChatGPT litigation case underscores that AI interaction logs are discoverable evidence, requiring risk-based retention, cross-functional accountability, and proactive legal compliance. On career development, transitioning from technical security roles to leadership (e.g., CISO) demands a shift toward business strategy, cross-functional communication, and continuous learning beyond pure cybersecurity.", "creation_timestamp": "2026-09-14T12:02:18.769543Z"} {"uuid": "c51b0323-6388-4b06-a305-7ecb9f8eb351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50461", "type": "seen", "source": "https://gist.github.com/ichintu/6e4365e719efc73cff29fb6a2ec0065b", "content": "**September 14, 2026 Cyber Threat Intelligence Digest**\n\nThis briefing highlights critical vulnerabilities, AI-driven security shifts, and industry insights:\n\n\u2022 **Active Threats & Vulnerabilities:** A CVSS 9.9 OS command injection flaw (CVE-2026-90699) affects the D-Link DWR-M920 with public exploits. NCSC/CISA warn of active exploitation of a critical GitLab path traversal (CVE-2026-85706). ~2.6 million MikroTik routers expose public services, and an authenticated TYPO3 extension flaw (CVE-2023-50461, CVSS 8.8) enables arbitrary code execution. Separately, a malicious Twitch browser extension leaked OAuth tokens for ~31,000 users to a Russian bot service.\n\n\u2022 **AI & Patching Dynamics:** Microsoft\u2019s September update addresses ~972 vulnerabilities, largely uncovered by AI scanning. While AI accelerates detection, it also compresses patch windows as exploits are rapidly reverse-engineered from new releases.\n\n\u2022 **AI Governance & Leadership:** The 3M ChatGPT litigation case underscores that AI interaction logs are discoverable evidence, requiring risk-based retention, cross-functional accountability, and proactive legal compliance. On career development, transitioning from technical security roles to leadership (e.g., CISO) demands a shift toward business strategy, cross-functional communication, and continuous learning beyond pure cybersecurity.", "creation_timestamp": "2026-09-14T12:02:18.769543Z"} https://vulnerability.circl.lu/sighting/c51b0323-6388-4b06-a305-7ecb9f8eb351/export Mon, 14 Sep 2026 12:02:18 +0000