News archive Page 7
918 articles · sorted newest first · page 7 of 39
Looking for a specific story? Search and filter the full archive.
Pwn2Own Ireland: 32 Zero-Days Fall on Day One
Pwn2Own Ireland's first day included 21 entries and multiple vendor-known bug collisions. The completed contest later reported 98 unique zero-days and $1.262 million in awards.
NJ Engineer Gets 32 Months for Locking 3,000 Devices
A former core infrastructure engineer in New Jersey was sentenced to 32 months in federal prison for locking more than 3,000 employer devices in a ransomware-style insider attack.
Atlassian Patches Critical Path Traversal Across 8 Products
CVE-2026-21589, CVSS 9.3: unauthenticated path traversal across eight Atlassian Data Center products. Patches released October 6, 2026.
ShinyHunters Member Arrested in Jordan, Aiding FBI
Saif al-Din Khader, detained in Jordan, is cooperating with the FBI over a major breach linked to ShinyHunters, the second arrest in the group within a week.
Perforce P4 Search Containers Expose RCE, Auth Bypass
Perforce P4 Search containers before 2026.4.2 expose an unauthenticated JDWP debug interface (RCE, CVSS 9.8) and reset auth tokens to a documented default (CVSS 9.1).
Exchange Server OOB Patch Closes Mailbox-Read Flaw
CVE-2026-96940, a CVSS 8.8 privilege escalation flaw in on-prem Microsoft Exchange, lets authenticated attackers read other users' mailboxes. Patch available now; Exchange Online already fixed.
ATB Ukraine: Cyberattack Confirmed, Data Leak Threatened
Ukraine's largest grocery chain ATB confirmed a cyberattack after hackers posted an extortion demand on its website and threatened to release stolen data.
Ransomware Hits UIC Medical School, Data Stolen
Ransomware struck the University of Illinois Chicago College of Medicine. Data was stolen from servers. Threat group, scope, and ransomware demand all unconfirmed.
Rejetto HFS RCE Under Active Exploitation
CVE-2026-61500 is a critical CVSS 4.0 9.3 flaw in Rejetto HFS: attackers can recover the session-signing key, forge admin sessions, and execute code remotely.
Citrix Patches Third NetScaler Zero-Day in Two Weeks
CVE-2026-88779 is a NetScaler DoS flaw exploited in zero-day attacks against SAML deployments, now in CISA KEV with a federal patch deadline of October 7.
ZITADEL Patches Four Auth Bypass Flaws, Two Critical
ZITADEL patched four authentication bypass CVEs this week, including CVE-2026-105207 at CVSS 9.8 and CVE-2026-105215 at CVSS 9.1. None confirmed exploited in the wild.
YesWiki Flaws Let Attackers Spoof Identity, Hijack SMTP
Two auth bypass flaws fixed in YesWiki 4.6.7 let unauthenticated attackers forge federated identities via ActivityPub and relay email through the wiki's SMTP server.
Four WordPress Plugins at CVSS 9.8: Auth Bypass Persists
Four critical authentication bypass flaws in WordPress plugins this week affect a mobile app builder, a JSON auth module, a developer toolkit, and a membership system.
MI5: China MSS Used 100+ UK Academics for Spying
MI5 has identified more than 100 UK-linked academics who helped China's MSS with intelligence collection. What the disclosure means for research institutions.
Vicksburg, Miss. Ransomware Attack Shuts Down City Systems
Vicksburg shut down city computer systems after an October 1 ransomware attack. Emergency response and utility service continued; systems are being restored in phases.
DTU Breach Exposes Data of Up to 200,000 Users
Hackers accessed DTU's identity and access management system and downloaded a database potentially containing records for up to 200,000 past and present users.
Fortra Fixes Critical Bugs in BoKS PAM Platform
Fortra has patched critical vulnerabilities in BoKS ServerControl, its Unix/Linux privileged access management platform. The flaws include authentication bypass, shell command execution, and memory corruption.
Warlock Ransomware Targets Water, Telecom via SharePoint
China-linked Warlock has hit a water utility, telecom provider, regional government, and university via SharePoint exploitation, per Symantec Threat Hunter Team.
Fleet MDM Auth Bypass Allows Rogue Device Enrollment
CVE-2026-103264 (CVSS 9.1) in Fleet MDM before 4.87.0 accepts hostnames and hardware serials as auth tokens in the device API. Patch available: Fleet 4.87.0.
Dell CSM Critical Flaws Allow Root on Kubernetes Nodes
Dell patches multiple critical flaws in Container Storage Modules that allow unauthenticated attackers to gain admin access and root on Kubernetes nodes.
GitLab AI Gateway Critical RCE: Patch Self-Hosted Now
A critical flaw in GitLab's AI Gateway lets attackers run arbitrary commands on self-hosted instances. GitLab urges immediate patching.
Zimbra Zero-Day Exploited Before Patch Release: Microsoft
Microsoft documents pre-disclosure exploitation of CVE-2026-73570: attacks confirmed July 28-August 7. Webshell deployment and systemd persistence observed.
Chinese APT Warlock Ransomware Targets Iberia
Chinese threat actor Warlock has hit large organizations in Spain and Portugal, operating more like a state-linked APT than a typical criminal crew.
AI Agents Made 200K Attack Requests to Gov Sites
Transluce researchers found autonomous AI agents conducted SQL injection probes and aggressive scanning against US and Canadian government websites while searching for public records data.