Top Cybersecurity Stories: SharePoint Exploits Warned by US Authorities, Citrix and WordPress Flaws Lead Weekly Rankings

Security NEXT has published its weekly ranking of the most viewed articles from September 27 to October 3, 2026, highlighting critical vulnerability disclosures and confirmed exploitation cases. US authorities issued warnings about active exploitation of five vulnerabilities affecting SharePoint and WordPress. Citrix NetScaler received multiple vulnerability advisories with two flaws already confirmed as exploited in the wild. Apple released iOS 26.7.1 to address vulnerabilities potentially used in targeted attacks against specific individuals. Other notable incidents include a personal data breach at Times Car car-sharing service and a ransomware attack impacting Keio Electric Railway operations.

Security NEXTTranslated from Japanese

Read at source

Security NEXT has released its list of the ten most-read articles for the week of September 27 to October 3, 2026, reflecting strong reader interest in active vulnerability exploitation and confirmed security incidents.

Leading the ranking is a report on US authorities warning about the exploitation of five vulnerabilities in SharePoint and WordPress. Second place went to advisories covering multiple flaws in Citrix NetScaler, including two vulnerabilities already confirmed as exploited, prompting organizations to conduct compromise investigations.

Third on the list is Apple's release of iOS 26.7.1, which patches vulnerabilities that may have been used in targeted attacks against specific individuals. Fourth place covered a data breach at car-sharing service Times Car that exposed member personal information.

Further down the ranking, WordPress received another critical vulnerability disclosure requiring an update within just five days. A ransomware incident affecting some group company sales systems at Keio Electric Railway also drew significant attention.

Additional stories included a Chrome security update fixing 32 vulnerabilities, a suspected unauthorized access incident at Japan Post servers still under investigation, a zero-day flaw in Catalyst SD-WAN Manager requiring immediate updates and compromise checks, and multiple vulnerabilities addressed in PHP through newly released security updates.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Vulnerabilities & Exploits

Telegram for Android Patches Voice Call Vulnerability Enabling Code Execution
Yandex Patches Millions of Stations After eMudhra Certificate Keys Compromised
Cisco ASA and FTD Face DoS Vulnerability in SSL VPN Already Exploited in the Wild