Weekly threat roundup

Published automatically every Monday from live open-source intelligence and the CISA known-exploited catalogue — newly exploited vulnerabilities first, then the stories worth your attention, each with the defensive action it implies.

• Week 37, 2026

  8 exploited CVEs

  Threat roundup — Week 37, 2026

  8 newly exploited vulnerabilities (ConnectWise, JFrog, GitLab) and 10 stories worth your attention, with the defensive actions that follow from them.