Border Cyber Group

Critical Systems Threat Intelligence Briefing

Active exploitation is concentrating on identity, email, backup and DevOps control planes. Cisco ISE, Cisco Secure Email Gateway, GitLab and Acronis require emergency action; WSO2, BIND and Oracle need accelerated remediation. CHOSEN BRICK remains targeted endpoint risk.

16 Sep 2026 CVE-2026-84869 ScreenConnect 26.6.5 CVE-2026-59310 VMware vCenter ransomware CVE-2026-87886 CVE-2026-5430 CenterPoint Energy breach Oracle September 2026 CSPU

Critical Infrastructure Threat Intelligence Briefing

ScreenConnect exploitation, ransomware use of a VMware vCenter RCE, targeted Acronis attacks, WSO2 forged-token attempts, a confirmed utility data breach, and major Oracle and Pixel fixes drive today’s critical-systems priorities.

15 Sep 2026 CISA cutbacks rural infrastructure cybersecurity AI cybersecurity assessment critical infrastructure resilience CSET water utility security cybersecurity workforce shortage operational technology security

CISA Is Withdrawing from Rural Infrastructure. AI Could Help Fill the Expertise Gap

CISA’s assessment cutbacks leave rural infrastructure providers exposed. Secure, evidence-driven AI could help them evaluate risk, prioritize repairs and extend scarce human expertise—without pretending automation can replace it.

15 Sep 2026 CVE-2026-76461 Cisco Secure Email Gateway CVE-2026-60004 Red Heron 3BB Triple T Broadband CVE-2026-39364 LiteSpeed 6.3.7 Windows OOB September 2026

Critical Infrastructure Threat Intelligence Briefing

Active exploitation of Cisco Secure Email Gateway and Gitea, a confirmed Thai telecom intrusion, mass Vite credential scanning, and Microsoft’s emergency Windows fixes drive today’s critical-systems priorities.

14 Sep 2026 Critical Infrastructure Cybersecurity JFrog Artifactory GitLab CVE-2026-85706 ConnectWise ScreenConnect Sogou Input Method CISA Known Exploited Vulnerabilities Active Exploitation Software supply-chain security

Critical Infrastructure Threat Intelligence Briefing

Active exploitation of GitLab, JFrog Artifactory and ScreenConnect keeps critical-system owners at RED. Today’s priorities are patching, forensic triage and restoring trust in code, remote-support and identity paths.