Border Cyber Group

Critical Infrastructure Threat Intelligence Briefing

Two exploited Citrix NetScaler flaws demand appliance triage and patching. Kiteworks has lifted its precautionary shutdown notice; ServiceNow platform fixes and GitLab backports need targeted review.

26 Sep 2026 Critical Infrastructure Cybersecurity week in review SharePoint CVE-2026-65660 MikroTik MikroTrick F5 BIG-IP APM Check Point exploitation industrial control integrators AI supply chain security

THE WEEK IN REVIEW

The week's defining risk lay in systems that administer other systems: VPNs, security management, builds, backup, SharePoint, and industrial suppliers. Late KEV additions for SharePoint and MikroTik sharpen the need to investigate past access as well as patch.

25 Sep 2026 SharePoint CVE-2026-65660 WSO2 CVE-2026-5430 Adobe Commerce CVE-2026-71362 Magento security CISA KEV API gateway security SharePoint Exploitation critical infrastructure threat intelligence

Critical Infrastructure Threat Intelligence Briefing

SharePoint exploit-chain attempts and new KEV listings for WSO2 and Adobe Commerce define today's priorities. Verify configurations and patch sequences, then assess trust where vulnerable systems may have been reached.

24 Sep 2026 WordPress CVE-2026-87902 TeamCity CVE-2026-63077 SolarWinds Observability Self-Hosted ICS integrator security OT supplier compromise CISA KEV Zyxel GS1900 critical infrastructure threat intelligence

Critical Infrastructure Threat Intelligence Briefing

New WordPress exploitation attempts, continued TeamCity attacks, and a newly disclosed industrial-integrator intrusion put web, build, and OT supplier trust in focus. SolarWinds fixes require configuration-aware triage; Zyxel's federal deadline falls today.

23 Sep 2026 Check Point CVE-2026-93616 Check Point CVE-2026-85102 VeloCloud CVE-2026-93952, F5 BIG-IP CVE-2026-94127 Siemens Siveillance OIS CISA KEV security gateway exploitation Critical infrastructure security

Critical Infrastructure Threat Intelligence Briefing

Four exploited vulnerabilities affecting security gateways and network control planes demand action today. This edition separates confirmed compromise from attack attempts, identifies affected configurations and fixes, and sets out the trust checks that follow patching.