IT security 2026-09-13

Level Tense — 62/100 — 2026-09-13

Tense day: 6 stories ranked, 3 of the top 6 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Passkey phishing targeting Microsoft Cloud accounts (70/100).

1. Passkey phishing targeting Microsoft Cloud accounts — 70/100
2. GitLab fixes unauthenticated arbitrary file access through repository commits API — 69/100 (CVE-2026-85706)
3. CISA adds five actively exploited JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS flaws to KEV — 67/100 (CVE-2026-42016)
4. Report links OpenAI agents to May RubyGems attack and code execution on RubyDoc servers — 48/100
5. AI Impact on SOC Operations — 20/100
6. Check Point VPN Flaws — 18/100 (CVE-2026-85102)