# Triton InfoSec News

> Daily curated cybersecurity news. Top 10 stories picked by AI from trusted security sources.

Triton InfoSec News is a public cybersecurity news aggregator at tritoninfosec.com.
Each day, AI curates the top 10 most important cybersecurity stories from trusted
RSS sources including The Hacker News, BleepingComputer, Krebs on Security,
Dark Reading, and others. Each story includes an AI-generated summary.

## Key Pages

- [Today's Top Stories](https://news.tritoninfosec.com/): The latest curated top 10 cybersecurity stories
- [Archive](https://news.tritoninfosec.com/archive): Browse all past daily curations by date
- [RSS Feed](https://news.tritoninfosec.com/feed.xml): RSS 2.0 feed of the 30 most recent curated stories
- [Sitemap](https://news.tritoninfosec.com/sitemap.xml): Full sitemap of all curated articles

## Content Structure

Each curated story includes:
- Headline and link to original source
- AI-generated summary of the article
- Source publication name
- Category (e.g. malware, vulnerabilities, data-breach, privacy, general)
- Publication date
- Relevance score (0-100)

## Current Top Stories

- [Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation](https://news.tritoninfosec.com/story/8881): CVE-2026-76461 is an unauthenticated remote code execution zero-day in Cisco Secure Email Gateway that allows attackers to execute arbitrary commands 
- [Maximum Severity GitLab Flaw Puts Supply Chains at Risk](https://news.tritoninfosec.com/story/8874): CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability affecting both GitLab Community Edition and Enterprise Edition, and CISA has confirmed acti
- [CISA: Hackers now exploit max severity GitLab flaw in attacks](https://news.tritoninfosec.com/story/8824): CISA issued a warning that threat actors are actively exploiting CVE-2026-85706, the maximum-severity GitLab path traversal flaw, in real-world attack
- ['Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink](https://news.tritoninfosec.com/story/8876): Russian APT group Sandworm is chaining Cisco vulnerabilities to deploy an upgraded variant of the Cyclops Blink botnet malware, which the FBI previous
- [Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries](https://news.tritoninfosec.com/story/8857): Chinese threat actor Red Heron exploited a recently disclosed Gitea RCE vulnerability to scan 1,386 Gitea instances across seven countries, successful
- [Three JFrog Artifactory Flaws Exploited for Backdoor Deployment](https://news.tritoninfosec.com/story/8831): Three vulnerabilities in JFrog Artifactory are being actively exploited to deploy backdoors, with attackers leveraging authentication bypass and privi
- [ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks](https://news.tritoninfosec.com/story/8828): ConnectWise has patched a ScreenConnect vulnerability that allows unauthenticated file transfer and execution through active remote sessions, with exp
- [Revolut discloses data breach exposing financial info, passports](https://news.tritoninfosec.com/story/8827): Fintech company Revolut disclosed a data breach in which an undisclosed number of customers had financial information and passport data exposed after 
- [New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing](https://news.tritoninfosec.com/story/8856): Researchers disclosed DDRop, a new hardware attack that defeats memory protection in both Intel TDX and AMD SEV-SNP confidential computing environment
- [Microsoft’s Patching](https://news.tritoninfosec.com/story/8833): Microsoft's September 2026 Patch Tuesday set a record with approximately 972 vulnerabilities fixed, including 112 rated critical-severity, surpassing