This media is not supported in your browser
VIEW IN TELEGRAM
A clean way to showcase Google Lens + AI Overview
moreweb.
https://depot.dev/
GItHub actions alternative (Actions compatible, Agents compatible)
This media is not supported in your browser
VIEW IN TELEGRAM
Footage recorded along Tehran’s Azadegan Highway corridor shows an unidentified airborne object displaying a curved array of synchronized, multicolor lights in airspace situated between Mehrabad International Airport and Imam Khomeini International Airport. Analysis of the craft's uniform light spacing and stable flight profile suggests a physical airframe rather than synthetic media, with primary technical explanations pointing to a custom fixed-wing radio-controlled platform, a specialized LED drone array, or an illuminated tethered kite. Aviation and defense monitoring authorities have not released transponder data or an official identification regarding the platform.
According to published reports, India and Iraq have also joined the U.S. air blockade against Iran.
1. Cisco ISE Zero-Day
Cisco ISE and ISE-PIC versions 3.0–3.5 are affected by actively exploited CVE-2026-76460, an authentication-bypass flaw.
No workaround is available. Upgrade immediately.
2. Cisco Secure Email Gateway
CVE-2026-76461 affects Cisco Secure Email Gateway and AsyncOS. The SQL-injection flaw is actively exploited and listed by CISA.
Apply fixed releases, verify versions, and review logs.
3. Acronis Backup Integrations
CVE-2026-87886 affects Acronis plug-ins for cPanel/WHM and Plesk. Local users may escalate privileges to root.
Apply fixes and review accounts and permissions.
4. Pixel Modem Zero-Day
Google fixed exploited Pixel modem flaw CVE-2026-58704.
Install the Android security update dated 2026-09-05 or later. Organizations should check mobile patch compliance.
5. BlueMoon Exploit Chain
The BlueMoon campaign reportedly chained browser, sandbox, and Windows flaws to target government and defense organizations.
Patch browsers and Windows, remove local admin rights, and monitor browser-to-system execution.
Cisco ISE and ISE-PIC versions 3.0–3.5 are affected by actively exploited CVE-2026-76460, an authentication-bypass flaw.
No workaround is available. Upgrade immediately.
2. Cisco Secure Email Gateway
CVE-2026-76461 affects Cisco Secure Email Gateway and AsyncOS. The SQL-injection flaw is actively exploited and listed by CISA.
Apply fixed releases, verify versions, and review logs.
3. Acronis Backup Integrations
CVE-2026-87886 affects Acronis plug-ins for cPanel/WHM and Plesk. Local users may escalate privileges to root.
Apply fixes and review accounts and permissions.
4. Pixel Modem Zero-Day
Google fixed exploited Pixel modem flaw CVE-2026-58704.
Install the Android security update dated 2026-09-05 or later. Organizations should check mobile patch compliance.
5. BlueMoon Exploit Chain
The BlueMoon campaign reportedly chained browser, sandbox, and Windows flaws to target government and defense organizations.
Patch browsers and Windows, remove local admin rights, and monitor browser-to-system execution.
Control-plane systems remain major targets, including identity, email, firewalls, backups, and developer automation.