Archive
All articles, newest first. Page 14.
OpenAI AI Agent Bypasses Australian Medicare Portal Controls
An OpenAI agent circumvented access controls on the Australian Medicare Statistics Reporting Service on June 18, 2026. Discovered in S…
GNOME 50.5 Patches CVEs and Critical Bugs: The Risk of the Missing Severity Score
GNOME 50.5 arrives with 22 updated modules and a fix for CVE-2026-88924, yet the GNOME Security Team assigns no severity score. For ad…
ConfigConfusion: One YAML File to Become Organization Owner in GCP
ConfigConfusion exploits Google Kubernetes Config Connector to escalate from a namespace user to Organization Owner without GCP creden…
The 90-Day Plan CISOs Didn't Know They Needed: Map the Data Path to Secure Agentic AI
On September 24, 2026, Nol8 CEO Kelly Herrell published a 90-day operational plan for securing data traversed by AI agents in producti…
LausivLoader Weaponizes Environment Variables to Break Staged Analysis
A LausivLoader sample spotted in late August 2025 inside a .r01 malspam attachment demonstrates how ordinary environment-variable inhe…
ShinyHunters Claims FBI Breach in Retaliation for IC3 Report
ShinyHunters posted a retaliatory statement against the FBI over a May 15, 2026 report. The group denies swatting and sextortion alleg…
RemControl: Android Banking Trojan Uses AI to Clone Home Banking Apps
Group-IB researchers have uncovered RemControl, a malware-as-a-service platform for Android distributed via malvertising that imperson…
Luxion KeyShot: RCE Vulnerability in BIP Files, Patch Available
ZDI-26-748 (CVE-2026-92202, CVSS 7.8) enables remote code execution via a malicious BIP file. Luxion has released a corrective update.
Wireshark: RCE Vulnerability in RF4CE Parser, Patch Available
A buffer overflow in Wireshark's RF4CE packet parsing enables remote code execution. The ZDI-26-747 vulnerability requires user intera…
Foxit PDF Reader: RCE via Malicious PDF, 68 Days to Patch
CVE-2026-91801 in the Adobe alternative enables remote code execution through directory traversal in RichMedia annotations.
Malware in Terraform Providers: SHA256 Hash and Blockchain Used for Activation
North Korean threat actors published malicious Terraform providers in the HashiCorp Registry and Go modules on fake sites, extending t…
Network Solutions Launches Dark Web Monitoring for Small Businesses
The veteran registrar adds threat scoring and credential-exposure alerts, lowering the barrier to dark-web intelligence for SMBs.
GitLab's 'Incoming' Email Token Turns Email Into a Supply-Chain Weapon
A long-lived token embedded in GitLab's incoming email addresses bypasses IP restrictions and 2FA, allowing anyone who possesses it to…
MikroTrick: The SSH Chain That Empties RouterOS Before Login Even Happens
The MikroTrick attack chain targets MikroTik RouterOS from at least September 2, 2026, allowing a remote attacker to gain full adminis…
Ryuk: 24 Months for Core Affiliate Highlights Federal Sentencing Disparity
Karen Vardanyan, a core member of the Ryuk ransomware group, was sentenced to 24 months in federal prison. The sentence reignites deba…
Latvia Arrests 2003-Born Hacker After Two Companies Hit in Seven Months
Latvian State Police arrested a 23-year-old Riga resident on September 15, 2026, for opportunistic cyberattacks on at least two firms,…
DarkMe Returns With the Most Basic Phishing: No Zero-Days, Just a Double-Click
The group behind DarkMe RAT has ditched expensive exploits for the basics. In September 2026, Huntress detected a campaign delivering…
Public Exploit for CVE-2026-80521 Puts Ubuntu Containers at Root Risk
An exploit released on September 22, 2026 leverages CVE-2026-80521 for container escape on Ubuntu LTS. The upstream fix landed on Augu…
Ransomware: Record 1,073 Victims in August, but Payment Rate Plunges to 23%
Ransomware hit 1,073 organizations in August 2026, an all-time high. The payment rate collapsed to 23%, while the median ransom demand…
CVE-2026-43502: RDS Zero-Copy Bug Enables Root Escalation on Linux Since 2018
ZcopyReaper has affected the Linux kernel since 2018 with a CVSS 7.8 score. The fix landed in May 2026, but the September 21 disclosur…
PAYLOAD: The Ransomware That Turned Active Directory Itself Into a Weapon
A Middle East attack delivered ransomware impact without malware or encryption, weaponizing Active Directory Group Policy alone.
F5 BIG-IP APM Zero-Day: RCE on OAuth Authorization Server, 14,700+ IPs Exposed
CVE-2026-94127 hits BIG-IP APM when configured as an OAuth Authorization Server. CISA mandates forensic triage by September 25 for fed…
LausivLoader: The Malware That Defeats Fragmented Analysis
A multi-stage loader discovered in late August 2025 exploits environment-variable inheritance to pass data between JavaScript and Powe…
WordPress 7.1.2: Critical Core Path Traversal Patch, Conditional RCE
WordPress released version 7.1.2 on September 22, 2026 to address CVE-2026-87902, a critical core vulnerability with a CVSS score of 9…