Archive
All articles, newest first. Page 22.
BAS at Machine Speed: The Structural Collapse of Disclosure-to-Exploit
The window from disclosure to weaponized exploit has collapsed to roughly 10 hours. Defensive controls stop 69% of attacks, but only 1…
ZDI-26-617: Windows MIDI Service Becomes LPE Path to SYSTEM, Patch Released
On September 9, 2026, the Zero Day Initiative published advisory ZDI-26-617, documenting a vulnerability in Microsoft's Windows MIDI S…
OpenAI's Internal Package Manager Became a Covert Data-Theft Channel
Check Point Research uncovered a cross-account covert channel in OpenAI's internal JFrog Artifactory instance. Reader credentials perm…
CVE-2026-19780: RCE in Koha Puts Library Management Systems at Risk
An eval code injection flaw in the open-source Koha library system enables authenticated remote code execution. CVSS 8.8, patched acro…
CVE-2026-50696: ZDI and Microsoft Split on Windows IKEv2 Severity
ZDI rates it RCE SYSTEM; Microsoft calls it DoS Important. The CVE-2026-50696 discrepancy upends patch prioritization for security tea…
Record-Breaking Patch Tuesday: Microsoft Fixes 974 CVEs, Two Zero-Days Under Active Attack
Microsoft addressed a historic 974 vulnerabilities in September 2026. Two actively exploited zero-days enabling local privilege escala…
ShinyHunters Claims Florida DMV Breach, 200,000 Driver Records at Risk
ShinyHunters claims to have breached the Florida DMV's DAVID platform, threatening to release over 200,000 driver records. The group's…
SAP Patches OVERPASS: Maximum-Severity Kernel Bug Opens ERP Systems to Unauthenticated RCE
SAP released the September 2026 patch for CVE-2026-44756, a maximum-severity kernel vulnerability that allows unauthenticated remote c…
ChatGPT's Isolated Containers Could Talk: Cross-Account Data Exfiltration
Check Point Research demonstrated a covert data-exfiltration channel between code-execution sandboxes belonging to different ChatGPT a…
npm: Known Worm Evades Registry Malware Scanning After 111-Day Dormancy
The Shai-Hulud npm worm resurfaced on September 7, 2026 with the identical SHA-256 hash documented four months earlier, bypassing the…
BengalSEO Poisons Bing to Deliver Malware and Tech Support Scams Since 2015
The BengalSEO cybercrime group, operating from Rajasthan, India since at least 2015, systematically manipulates Bing search results th…
Settra Hits Verve Portraits: Over 100 GB of Photos and Personal Data Threatened
The Settra ransomware group listed Verve Portraits Pty Ltd as a victim on September 3, 2026, claiming exfiltration of more than 100 GB…
AI Ports RCE Exploit Across PLCs: 8 Hours, $535, One Bricked Device
Forescout researchers used generative AI to port a known exploit from one WAGO PLC to a related model. Cost and time remain high, but…
Ransomware Negotiations Evolve into Structured Business Process with Specialized Roles
Intel 471 documents how ransomware groups have industrialized extortion with researchers, negotiators, and pricing calibrated to victi…
PoisonedRefresh: The Memory-Only Web Shell That Evades Disk Forensics on F5 BIG-IP APM
PoisonedRefresh infects F5 BIG-IP APM servers by exploiting CVE-2025-53521 and hides its web shell exclusively in memory, leaving on-d…
Liquid Network: $320 Million Stolen, Hackers Promise Return After Patch
On September 6, 2026, unknown actors drained roughly 4,000 BTC — valued at approximately $320 million — from Liquid Network's federate…
ConnectWise Discloses Unpatched ScreenConnect File-Transfer Flaw, MSPs at Risk
ConnectWise has disclosed a vulnerability in ScreenConnect's file-transfer feature with no patch yet available. MSPs must disable file…
Chrome 0-Day and MikroTik Hijacks: Critical Week for Patching
Seven actively exploited zero-day vulnerabilities hit Chrome, MikroTik routers, N-able platforms, and Magento. The gap between patch a…
Trezor: 81,000 Customers Exposed, ShipMonk Violated Data Deletion Contract
The Trezor breach impacts 81,000 customers, 67,000 of whom believed their data had been deleted per contract. ShipMonk retained the da…
Bimbo Bakeries: 8 Months of Forensics for an ERP Breach via CVE-2025-61882
Bimbo Bakeries USA confirmed a data breach through Oracle EBS with an eight-month gap between discovery and notification. The case hig…
Check Point Report: AI Agents Compromise Enterprise Network in Under 10 Hours
The September 7, 2026 report documents an AI-assisted ransomware attack that compressed weeks of intrusion into hours, alongside zero-…
CrowdStrike FalconFlank: Zero-Day Privilege Escalation Weaponizes EDR's Own Macro Remediation
On September 3, 2026, researcher Chaotic Eclipse publicly released FalconFlank, a proof-of-concept for a zero-day vulnerability that t…
Autonomous AI Agents Compromise Enterprise Network in Under 10 Hours
Check Point Research's September 7, 2026 report documents an AI-orchestrated attack that compressed weeks of tradecraft into a single…
FalconFlank Exposes the EDR Paradox: Protection Becomes Attack Surface
Researcher Nightmare Eclipse released FalconFlank, a working zero-day privilege escalation PoC against CrowdStrike Falcon Sensor. The…