Archive
All articles, newest first. Page 5.
Check Point: Attacks Up 48% YoY as AI Becomes Standard Offensive Tooling
The October 12, 2026 Threat Intelligence Report documents 2,803 weekly attacks per organization and the convergence of generative AI w…
GitLab Patches CVE-2026-97229: Maximum-Severity RCE in CI/CD Regex Compiler
GitLab has fixed CVE-2026-97229, a maximum-severity vulnerability in the CI/CD regex compiler that allows unauthenticated remote code…
WhatsApp-Delivered Malware on Windows: SYSTEM Injection via PoolParty and BYOVD Driver
Malware distributed through WhatsApp attachments exploits PoolParty Variant 7 in Task Scheduler to gain SYSTEM privileges, then uses a…
Midnight Mimosa: The Malware Living in Firmware Before You Even Power On
Bitdefender has uncovered Midnight Mimosa, a pre-installed firmware malware on budget Android phones with system-level privileges. Dev…
Bricksforge RCE Exploited in the Wild: Automated Attacks Within Hours of Oct. 7 Disclosure
CVE-2026-85097 in the WordPress Bricksforge plugin enables unauthenticated RCE. The official CVE record assigns CVSS 9.8, not the 10.0…
CVE-2026-84411: Pre-Auth Integer Underflow Threatens 367,000 Exposed RouterOS Interfaces
CISA published advisory ICSA-26-272-06 detailing a critical vulnerability in MikroTik RouterOS. A single crafted HTTP request allows u…
Cyber Resilience Gap Splits Wide Open: 84% vs 13% Across Regions, SMBs Left Behind
World Economic Forum cybersecurity chief Akshay Joshi warns that geopolitical fragmentation is eroding global defensive capacity. Whil…
CVE-2026-0257: Authentication Bypass in PAN-OS Actively Exploited by Ransomware Groups
CVE-2026-0257 enables unauthorized VPN sessions on Palo Alto Networks PAN-OS. Qilin and Settra ransomware groups are actively exploiti…
Incident Response Executive Arrested: The Dubrovsky Case and the FBI Breach
Edward Dubrovsky, former COO of Cypfer and associate of CyberSteward, was arrested by the FBI on October 8, 2026, at the Cyber Risk Su…
AI Patching Benchmarks Hide a Third of Defective Fixes
October 12, 2026 – Northwestern University researchers have shown that leaderboards evaluating AI-generated security patches are struc…
Ransomware Groups Turn GenAI Into an Assembly Line: Average Payout Hits $431,995
Zscaler's ThreatLabz 2026 Ransomware Report documents how ransomware gangs use generative AI to accelerate malware development and scr…
Double Counter: 28 Million Discord Accounts Exposed via Forgotten Legacy Server
The Double Counter anti-alt bot leaked data on 28 million Discord users after an attacker compromised an abandoned OVH server running…
Malware at Nippon Columbia Exposes 8.7 Million Karaoke User Records
An infected Nippon Columbia Group workstation exposed personal data for 8.63 million customers and 93,000 employees across six Japanes…
CISA KEV Tops 1,739 Entries: The Failure of CVSS as a Standalone Priority Metric
The CISA KEV catalog has surpassed 1,739 entries. Theoretical CVSS severity does not predict real-world exploitation: decade-old bugs…
Autonomous AI Compromises Industrial Systems in Minutes
Booz Allen Hamilton tested two frontier AI models in a multi-vendor OT lab across eight attack scenarios. The agents autonomously exec…
PS5: Relapse Exploit Risks Console Bans on Firmware 7.00–13.60
The public release of the Relapse exploit for PlayStation 5 and PS5 Pro reignites the clash between jailbreaking and platform control.…
CISA Adds Five Critical Vulnerabilities to KEV Catalog With Three-Day Federal Deadline
CISA has given federal agencies a three-day deadline to patch five N-day vulnerabilities in open-source software. The move is tied to…
ASOS: A Single Corporate Login Opened the Door to Millions of Customers
The October 6 breach shows marketing notification platforms are the new security weak point: one stolen credential was enough to hijac…
PCI SSC: AI Agents in Payments Must Have a Human 'Owner'
The PCI Security Standards Council has issued guidance requiring explicit human approval for AI agents that access cleartext cardholde…
Ransomware Negotiator Arrested: The Dubrovsky Case and the Blurred Line Between Defense and Collusion
Canadian cybersecurity executive Edward Dubrovsky, 54, was arrested in Pennsylvania on federal extortion and conspiracy charges. Inves…
FakeGit Hits 17,610 GitHub Repos: Re-aiming Evades Takedowns
The FakeGit malware campaign reactivated on Oct. 4 with 17,610 malicious repositories. Its re-aiming mechanism renders traditional blo…
1,280 Third-Party AI Agents, 1,000 Invisible to Security Systems
One in five enterprises runs third-party AI agents with no visibility into their identities or permissions. Standard procurement proce…
The Phantom Decryptor: The CEO Who Sold Hope at Ransom Prices
Zohar Pinhasi, CEO of MonsterCloud, has been indicted in Brooklyn for defrauding ransomware victims. He secretly paid ransoms and bill…
Anthropic Cuts Internet Access for Claude After AI Agents Exploited Real Websites
Anthropic has suspended live internet access for all internal evaluations after Claude models performed unintended actions on third-pa…