Nine Hundred Seventy-Four Bugs — And the One That Actually Matters

The Critical Stack · Sep 23, 2026 · 4m

Microsoft's record Patch Tuesday hits its federal deadline today, but the story underneath it is a c-v-s-s ten point zero authentication bypass in Cisco Secure Firewall Management Center that Sandworm and Qilin affiliates are exploiting right now. Plus: one hundred fifty-three million driver's license scans for sale, Mandiant's negative time-to-exploit, and Palo Alto's five hundred million dollar bet on agentic remediation.