September 2026 Cyber Incidents Overview: 182 Attacks Recorded
Article Content
- •September 2026 saw 182 confirmed cyber incidents, primarily driven by cybercrime.
- •Malware was the leading attack vector, involved in 27.8% of incidents.
- •Exploitation of public-facing applications was a significant method for initial access.
In September 2026, a total of 182 confirmed cyber incidents were reported, with cybercrime accounting for approximately 73.9% of these attacks. Malware was the primary attack vector, involved in 27.8% of incidents, while exploitation of public-facing applications led to initial access in 28.9% of cases. The Information & Communication sector was the most targeted, reflecting a significant trend in attack vectors. The United States emerged as the most affected country, with 23% of the incidents occurring there. This data highlights the ongoing challenges in cybersecurity, particularly concerning public-facing vulnerabilities. The statistics are presented in an infographic summarizing the month's key numbers. The information is corroborated by multiple sources from Hackmageddon.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What types of attacks were most common?
Which sector was most targeted?
How often did incidents occur?
Continue Reading
Critical Citrix NetScaler Vulnerabilities Actively Exploited in Finland The National Cyber Security Centre Finland (NCSC-FI) issued an alert regarding critical vulnerabilities in Citrix NetScaler ADC and Gateway products, specifically CVE-2026-88771 and CVE-2026-88772, which are being actively exploited in Finland. These vulnerabilities allow attackers to execute remote code without…
Critical Authentication Bypass in Rejetto HFS Exploited Within 24 Hours Anthropic's Mythos model identified a critical authentication bypass in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500, allowing remote code execution. Discovered by Horizon3 researcher Zach Hanley, the flaw was revealed on September 27, 2026, and exploitation began within 24 hours, with attacks traced to…