SEPT
12
UK mortgage rates September 2026: 2-year fixed 4.77% (75% LTV), 5-year fixed 4.80%. BoE base rate 3.75% (cut from 4.00% in June). Markets pricing 50/50 on Sep 17 MPC hold vs cut. 2yr-5yr spread only 3bp - advisors recommend 5yr.
SEPT
12
Ofgem UK energy price cap rises 4% from £1,663 to £1,723 per year (typical direct-debit household) for Oct 1-Dec 31, 2026. Gas unit rate +8.7% to 7.97p/kWh. VAT removed from domestic electricity Oct 1-Mar 31, 2027. 22M households protected.
SEPT
12
Nationwide home insurance rates rose 47% from 2020 through 2025 per LendingTree's 2026 State of Home Insurance report (Sep 8, 2026). Hardest-hit states: Colorado +18.3%, Minnesota +17%, Iowa +14.7%. Top 2026 projected increases: California +16%, Nebraska +13%, New Mexico +11%, Georgia +10%.
SEPT
12
California home insurance rate hikes for fall 2026: Allstate approved +34% (Sep 5), State Farm requested +30%, FAIR Plan approved +29.1% effective Oct 15 affecting 675,000+ policyholders with $768B exposure.
SEPT
12
FHA mortgage rates September 12, 2026: 30-year FHA at 6.27% (+11bp post-CPI). Lowest agency option for first-time buyers - typically 50-75bp below conventional conforming. Down payments as low as 3.5%, MIP 0.55% annually.
SEPT
12
Mortgage rates September 12, 2026: 30-year fixed jumped post-CPI to 6.83-7.10% across daily surveys (Yahoo 6.83% +19bp, Mortgage Research 6.91%, US News 7.10%). 10-year Treasury +13bp to 4.31% after hot core CPI print.
SEPT
12
Veradigm (formerly Allscripts) disclosed patient data breach after Gentlemen ransomware gang claimed the attack (BleepingComputer). Veradigm is a major US EHR and practice-management vendor serving physician practices and hospital systems.
SEPT
12
An Oracle E-Business Suite (EBS) attack campaign has compromised multiple Fortune-1000 enterprises in 2026, including Michelin (~300GB). Oracle EBS handles HR, finance, and supply chain - high-impact exploitation across industries.
SEPT
12
Remote code execution vulnerability in Gitea (open-source self-hosted Git service) CVE-2026-60004 disclosed August 27, 2026. Affects self-hosted deployments. RCE allows code execution on the Gitea server - compromising source code and CI/CD credentials.
SEPT
12
Two critical zero-day vulnerabilities in SonicWall SMA 1000 disclosed September 3, 2026: CVE-2026-83548 and CVE-2026-83549. Affects SSL VPN appliances. Active exploitation possible - patch immediately.
SEPT
12
Hackers stole customer data from Craneware, a major hospital software vendor. Disclosure via Cybersecurity Dive. Craneware handles pharmacy revenue management, 340B compliance, and charge integrity for hundreds of US hospitals.
SEPT
12
Luminis Health Maryland hospital system hit by cyberattack disclosed September 2, 2026. Anne Arundel Medical Center and Doctors Community Medical Center affected. Systems offline, dedicated patient helpline 443-222-0193. 790 beds, 6,100 employees.
Get career tips in your inbox
One email a week — new articles, guides and course updates. No spam.