Top 5 Cybersecurity News

Top 5 Cybersecurity News September 25 2026 DIESEC weekly security briefing

This week’s Top 5 Cybersecurity News follows a thread that has been building across 2026: attackers are no longer trying to bypass the perimeter; they are subverting the infrastructure that maintains it. Russia’s Sandworm group deployed an updated Cyclops Blink botnet variant through Cisco’s firewall management console, turning the administrative plane into an entry point.…

Read More

Certighost CVE-2026-54121 Active Directory Domain Takeover

Certighost CVE-2026-54121 Active Directory flaw lets any standard user impersonate a Domain Controller and take over the entire domain via DCSync.

Certighost CVE-2026-54121 Active Directory is a certificate-services flaw that turns any ordinary domain-user account into full control of your entire Windows domain — no admin rights, no malware, no phishing required. Microsoft patched it on July 14, 2026, but a full technical writeup and working proof-of-concept went public on July 24. If your Active Directory…

Read More

Top 5 Cybersecurity News Stories July 31, 2026

Cybersecurity News Stories July 31, 2026: Minnesota water OT attack, TeamCity CVSS 9.8 RCE, Certighost AD CS domain takeover, NGINX chain RCE, Cisco FMC KEV.

The five stories in this week’s Cybersecurity News Stories July 31, 2026 each describe a different failure at the same architectural level: not the application layer, not the endpoint estate, not even the network perimeter as conventionally modelled — but the foundational infrastructure that the perimeter, the applications, and the endpoints depend on in order…

Read More