News archive Page 8
918 articles · sorted newest first · page 8 of 39
Looking for a specific story? Search and filter the full archive.
Operation KillSwitch Dismantles KillSec Ransomware RaaS
International law enforcement seized KillSec's leak site, arrested three, and identified an alleged 16-year-old as the ransomware gang's leader.
Fortinet FortiMail Zero-Day CVE-2026-104286 in KEV
Fortinet's FortiMail has a CVSS 9.8 path traversal flaw under active exploitation. CISA added it to KEV on October 1 with a patch deadline of October 4.
Pentagon DMDC Breach Hits 3 Million Personnel Files
The Pentagon's DMDC is notifying over 3 million service members after attackers breached its HR management system and stole personnel records.
Bitget Confirms Zero-Day Behind $387.5M Crypto Theft
Bitget says the $387.5 million theft last week came from a zero-day in an unnamed third-party security product. The CVE and vendor remain undisclosed as the investigation continues.
Apple CoreGraphics PoC Released, KEV Deadline Oct 2
A public PoC for CVE-2026-86950 is available as of October 1. CISA's patch deadline for federal agencies is October 2. Affected: iOS 26, iPadOS, macOS 26, macOS 15.
Git Hash Chain Malleability: The Supply Chain Risk
SHA-1 is still the default in most Git repositories. Here is what hash chain malleability means, what it puts at risk, and how to close the gap.
DIVD Breached via Zammad Zero-Day Chain
The Dutch Institute for Vulnerability Disclosure confirms attackers exploited two unpatched Zammad zero-days to breach its internal network. No CVE IDs assigned yet.
Cisco SD-WAN Manager Auth Bypass Exploited: Patch Now
CVE-2026-76504, an authentication bypass in Cisco SD-WAN Manager rated CVSS 9.8, is under active exploitation. Federal agencies must patch by October 3.
FBI Warns ShinyHunters Members to Surrender After Arrest
Dutch police arrested an alleged ShinyHunters leader, prompting the FBI to warn remaining members of the extortion group to turn themselves in.
Ransomware Hits South Africa Air Traffic Control
A ransomware toolkit was installed on at least one operational network at South Africa's air traffic control authority, prompting a request for international cybersecurity assistance.
Firefox 157 Patches Two CVSS 9.6 Sandbox Escapes
Mozilla patched five vulnerabilities in Firefox 157, including two CVSS 9.6 sandbox escapes via use-after-free in the DOM Content Processes component.
OpenSSL and WolfSSL Patch High-Severity Flaws
OpenSSL and WolfSSL each patched roughly a dozen high-severity flaws this week. Admins running web services, VPN appliances, or embedded devices should check for updates.
NetScaler Web Shells Confirmed: KEV Deadline Is Today
Cybersecurity firms document the CVE-2026-88772 attack chain: web shells, tunneling malware, root access, and lateral movement. CISA KEV deadline expires today.
Arizona Supreme Court Confirms Resident Data Stolen
Hackers stole personal data from Arizona's court system. No ransomware; no ransom demands as of Monday. Breach scope and affected count undisclosed.
SailPoint Patches Critical Unauth RCE in IdentityIQ
SailPoint patches CVE-2026-12342, a CVSS 9.6 unauthenticated RCE in IdentityIQ. All versions are affected. Apply the vendor patch immediately.
Apple Patches CVE-2026-86950: CoreGraphics, Targeted Attacks
Apple patched CVE-2026-86950 in CoreGraphics on September 28 with an emergency update for iOS 26, macOS 26, and macOS 15. Apple's advisory states it may have been exploited in targeted attacks.
Kiteworks Patches Critical Flaw, Lifts Shutdown Order
Kiteworks patched the flaw behind its September 26 emergency shutdown advisory. Apply the update before restoring any Kiteworks instance to service.
Keio Group Ransomware Disrupts Business Systems, Not Trains
Keio confirmed a ransomware attack disrupted some group-company sales systems. The railway says train operations were unaffected and no data leak was confirmed as of September 26.
Apache Roller Patches Critical XML-RPC Deserialization Bug
Apache Roller 6.1.5 has four patched vulnerabilities, including a CVSS 9.8 deserialization flaw allowing unauthenticated RCE via the XML-RPC endpoint.
JADEPUFFER Uses Stolen Service Principals to Destroy Azure
Microsoft Threat Intelligence tracks JADEPUFFER-linked attackers using compromised Azure service principals to delete cloud resources. Audit your tenant's non-human identities now.
ShinyHunters Retooled PeopleSoft Exploit, Google Warns
Google warns ShinyHunters has retooled its CVE-2026-35273 exploit and is running a fresh campaign against Oracle PeopleSoft. Patch or take exposed instances offline now.
Bitget Resumes Withdrawals After $387.5M DPRK Heist
Bitget restored Bitcoin withdrawals September 28, days after suspected North Korean hackers stole $387.5 million from the exchange in a backend compromise.
Citrix Patches NetScaler Zero-Days CVE-2026-88771, -88772
Citrix patched CVE-2026-88771 and CVE-2026-88772 in NetScaler ADC and Gateway. CISA orders federal agencies to apply by September 30.
Obot AI Platform Patches Three CVEs, Two Critical
Three GitHub Security Advisories disclose an unauthenticated Docker exposure and two MCP endpoint access control failures in the Obot AI agent platform.