Archive
All articles, newest first. Page 20.
Cl0p Adds Harley-Davidson to Leak Site; No Breach Evidence, Company Says
The Cl0p ransomware gang listed Harley-Davidson on its data-leak site on September 10, 2026. The motorcycle maker has not confirmed an…
CISA and FBI: No PR Spin During IT/OT Outages
CISA and the FBI have issued joint guidance urging service providers to prioritize factual transparency and avoid marketing-driven nar…
CISA/FBI Post-Attack Communication Guidance Splits Experts
CISA and the FBI released joint guidance on September 8, 2026, urging service providers to replace PR spin with technical transparency…
GuardBreaker: UAC-0099 Tricks LLM Scanners with a VBScript Comment
Russia-aligned group UAC-0099 used the GuardBreaker technique to make an LLM-based scanner refuse analysis of a malicious VBScript. Th…
Brevo-Trezor: 138 Accounts, 347,000 Emails — The Weak Link Is SaaS
A SAML SSO flaw at email provider Brevo exposed 138 accounts and fueled a phishing wave of 347,000 emails targeting Trezor hardware wa…
Florida DAVID Database Breached via Police Credentials Stored on Personal Device
The Florida Department of Highway Safety and Motor Vehicles confirmed on September 4, 2026, that the DAVID database — containing recor…
Brevo breach: 138 accounts compromised, crypto phishing sent from legitimate domains
An attacker exploited a SAML SSO vulnerability in Brevo to send phishing emails to crypto customers from authentic corporate domains.…
Conti Ransomware Loader Developer Sentenced to Four Years in U.S. Federal Prison
Ukrainian national Oleksii Lytvynenko, who built the first-stage loader malware for the Conti ransomware group, was sentenced on Septe…
Check Point Sounds Third Critical Alert in Four Months: Two VPN Flaws Enable Unauthenticated RCE
Check Point released patches on September 9, 2026 for two critical VPN vulnerabilities rated CVSS 9.8, both allowing unauthenticated r…
GitLab Patches CVE-2026-85706: Path Traversal CVSS 10.0 in Self-Managed Instances
GitLab released critical patches on September 10 for CVE-2026-85706, a path traversal vulnerability with a CVSS 10.0 score that expose…
PaperCut: 440 Servers Compromised by AI Agents — 11 Organizations Breached in 26 Seconds
A Russian-speaking threat actor deployed hundreds of AI agents on OpenAI Codex and DeepSeek to automate exploitation of two PaperCut N…
IDScan Confirms Breach: 153 Million Driver's Licenses for Sale on Dark Web
IDScan.net has confirmed a data breach exposing millions of identity documents. The dark web service Nexus was selling them with trace…
Midnight Blizzard Used Claude AI to Automate the Malware Evasion Loop
Anthropic disrupted a GTG-20006 operation attributed to Midnight Blizzard: AI agents autonomously modified and recompiled malware to r…
PAPPL Raster Bug Enables Unauthenticated Remote Code Execution on Linux Print Servers
ZDI-26-656 discloses a heap buffer overflow in PAPPL that allows unauthenticated remote code execution when allow_remote=true. The fla…
Microsoft: Vishing on Employee Personal Phones to Breach M365
Storm-3032 and Storm-3121 are calling employees on their personal cell phones to steal Microsoft 365 credentials. The lack of logs on…
VirtualBox VirtioSCSI Memory Bug Opens Guest to Hypervisor
CVE-2026-71132: A memory initialization flaw in VirtualBox's VirtioSCSI device enables information disclosure with scope change. Oracl…
TrendAI Apex One: TmccCore Flaw Allows Local Root Escalation
CVE-2025-71414 in the TmccCore component of Apex One enables local privilege escalation to root. A patch was released in February 2026…
Adobe Photoshop: RCE via DICOM JPEG (CVE-2026-75862) Patched in APSB26-130
An integer overflow in Adobe Photoshop's DICOM JPEG parser enables remote code execution. CVE-2026-75862 carries a CVSS 7.8 rating and…
OpenAI Codex: RCE via .git/config, Patch Available
CVE-2026-19593 enables remote code execution in OpenAI Codex Desktop by exploiting Git configuration. A patch is available: here's wha…
Adobe Acrobat Reader: DigSig Bug Enables RCE via PDF, Urgent Patch Released
On September 10, 2026, Adobe patched CVE-2026-81973, a Use-After-Free vulnerability in the digital signature component of Acrobat Read…
CVE-2026-19397: Unauthenticated RCE in ASUS Control Center Express Agent
A critical flaw in the ASUS Control Center Express Agent exposes managed workstations to unauthenticated remote code execution via a p…
MantaxOtax: The Android Ransomware That Controls, Spies On, and Torments Victims
Zimperium zLabs discovered MantaxOtax, a hybrid Android malware combining AES ransomware with full-spectrum spyware, remote device con…
NI LabVIEW: Integer Overflow in VI File Parsing Exposes Sensitive Data
CVE-2026-18445 affects VI file parsing in NI LabVIEW. The ZDI-26-630 advisory details an integer overflow requiring user interaction t…
PivotC2: The Native FortiGate RAT That Hit 178 Devices
Russian-speaking threat actors are exploiting CVE-2025-25249 to deploy PivotC2, a specialized FortiGate RAT. CISA mandates forensic tr…