Sign in Subscribe
security

🔐 Security Pulse · 2026-09-15 16:00 UTC

⚡ TL;DR

Russia is actively supplying Iran with upgraded munitions and targeting intelligence for attacks on U.S. forces in the Middle East, raising regional risk considerably. Overall threat level remains elevated. 🔴🟡 [1]

🔐 CYBER THREATS

  • Multiple high-severity vulnerabilities identified in Open Access Management (OpenAM) versions prior to 16.1.1, including unauthenticated SOAP requests and session management flaws risking enterprise SSO and federation security. 🟡🟡 [2][3][4]
  • Critical remote code execution and unauthenticated access flaws found in MISP (Malware Information Sharing Platform), affecting dashboard templates and state-changing controller actions, exposing incident response infrastructures. 🔴🔴 [5][6][7]
  • Recent CVEs in MikroTik RouterOS (pre-7.24.2) disclose buffer overflow and path traversal vulnerabilities potentially exploitable to disrupt networked infrastructure. 🟡 [8][9]
  • New unauthenticated file read vulnerability discovered in DeepWiki-Open chat WebSocket endpoint enabling repository exposure. 🟡 [10]
  • CISA emphasizes Microsoft Active Directory remains a prime target with 17 common attack techniques detailed for detection and mitigation. 🟡
  • A new JWT signing secret hardcoded in Crawlab (v0.6.3) enables unauthenticated token forging risks. 🟡
  • Emerging unconfirmed malware activity documented by vx-underground with ongoing analysis; no confirmed active threats yet. 🟡

🛡️ NATIONAL SECURITY

  • Russia is supplying Iran with enhanced munitions, satellite imagery, and targeting data to aid attacks against U.S. forces in the Middle East, escalating the conflict in that theater. 🔴🔴 [1]
  • The U.S. Air Force plans a new career field dedicated to defending American air bases globally within two years, enhancing base defense posture. 🟢
  • The U.S. Navy awarded Boeing a $562M contract for initial production of MQ-25A Stingray unmanned refueling drone, extending carrier strike group capabilities. 🟢
  • Lockheed Martin expands production of prototype collaborative combat aircraft from one to five units, with uncrewed Vectis aircraft first flight planned by end of 2027. 🟢
  • NATO allies may conduct military drills near Russia’s Kaliningrad to pressure Moscow to redeploy forces from Ukraine, signaling rising regional tensions in Eastern Europe. 🟡🟡
  • The U.S. Air Force has deployed unspecified on-orbit space control weapons, indicating growing emphasis on space-based defense capabilities. 🟡
  • France is exploring dispersed tank and support vehicle tactics to reduce threat attractiveness on contested land battlefields. 🟢
  • Military experts highlight the challenge of countering fast, reckless enemy AI agents operating without traditional oversight or control. 🟡

⚠️ RISK FLAGS

⚠️ Russia-Iran military tech transfers supporting attacks on U.S. forces increase risk of escalation in the Middle East and require close monitoring. 🔴🔴 [1]

⚠️ Multiple critical vulnerabilities in OpenAM and MISP pose immediate risk to identity federation and malware collaboration platforms widely used in government and private sector. Rapid patching advised. 🔴🔴 [5][6][2]

⚠️ NATO’s possible drills near Kaliningrad risk drawing closer confrontation with Russia, potentially destabilizing Eastern European security environment. 🟡🟡

🧭 THREAT MOOD

Threat level: ELEVATED 🟡🟡

Heightened geopolitical tensions, ongoing cyber vulnerabilities in key infrastructure software, and intensified military readiness measures define a cautiously watchful environment today.

📎 Sources

  1. Russia has begun sending Iran upgraded munitions, satellite im… — @defense_news
  2. CVE-2026-44793 Open Access Management (OpenAM) is an access ma… — @CVEnew
  3. CVE-2026-45052 Open Access Management (OpenAM) is an access ma… — @CVEnew
  4. CVE-2026-53660 Open Access Management (OpenAM) is an access ma… — @CVEnew
  5. CVE-2026-91851 Affected versions of MISP incorrectly filter da… — @CVEnew
  6. CVE-2026-91857 Affected versions of MISP expose several state-… — @CVEnew
  7. CVE-2026-91859 Affected versions of MISP can record incorrect … — @CVEnew
  8. CVE-2026-89020 MikroTik RouterOS before 7.23.4 (long-term) and… — @CVEnew
  9. CVE-2026-89021 MikroTik RouterOS before 7.24.2 contains a path… — @CVEnew
  10. CVE-2026-90946 DeepWiki-Open through commit d92819a contains a… — @CVEnew

Educational & informational only — not financial advice. Markets carry risk; do your own research.
Serial 20260915-16-v71 · 2026-09-15 16:00 UTC · pulse.uzylab.com

Read next