CyberNews: 13/09/2026 Edition

Today’s roundup

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Summary

CISA added five actively exploited flaws in JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, including CVE-2026-42016 (CVSS 8.1), an incorrect authorization flaw.

Microsoft detailed two campaigns abusing third-party email delivery infrastructure: one sent more than a million financial fraud emails impersonating chief executives between August 3 and 5, 2026, while the other used passkey-themed phishing to hijack Microsoft cloud accounts and exfiltrate data.

Want to dig deeper?

Vulnerabilities

CVE-2026-42016

High