SEPT
12
Microsoft Patch Tuesday September 2026 broke records with ~960-974 CVEs and 2 already-exploited Windows zero-days (CVE-2026-81963 Update Stack EoP, CVE-2026-85880 ALPC AppContainer escape). CISA KEV deadline Sep 22 for federal agencies.
SEPT
11
Vietnam airports data breach 2026: 220M traveler records exposed via misconfigured public APIs across 22 airports (Noi Bai + Tan Son Nhat + Da Nang + Cam Ranh + Phu Quoc + 17 more). Leaked: full name + DOB + passport + nationality + email + phone + flight itinerary + PNR + payment summary. Discovered Q1 2026. vs Cathay 9.4M + Marriott 500M + EasyJet 9M + Air India 4.5M + T-Mobile 76.6M + 23andMe 6.9M + MOVEit 100M+.
SEPT
11
Mathspace data breach 2026 — over 1 million users affected. Mathspace is an adaptive math learning platform for K-12 schools. Education-sector breach with student and teacher data exposed.
SEPT
11
Metabase zero-day SQL injection vulnerability exploited in 2026 — affected Tally (form builder) and Framework (laptop maker). CVE-2026-0768. Part of the same campaign that hit ShipMonk/Trezor.
Get career tips in your inbox
One email a day — new articles, guides and course updates. No spam.
