Archive
All articles, newest first. Page 9.
U.S. Senate Unanimously Passes Health Care Cybersecurity Act
The U.S. Senate approved the Health Care Cybersecurity and Resiliency Act on October 1, 2026. The bipartisan bill now moves to the Hou…
16-Year-Old Behind ShinyHunters Detained in Jordan, Cooperating With FBI
Jordanian teenager Saif al-Din Khader, known as "Rey," was detained in Jordan on September 28–29, 2026, and is cooperating with the FB…
Booba Ransomware Hits UIC College of Medicine: 344 GB Claimed
The University of Illinois Chicago confirmed on Oct. 5, 2026, that its College of Medicine suffered a ransomware attack limiting acces…
First Cyber Fugitive on FBI Top 10 Arrested: The Ploutus Case
Anibal Alexander Canelon Aguirre, 50, also known as "Prometheus" and "The Engineer," appeared in federal court in Nebraska on Friday,…
Debian Bundles 1,313 Kernel CVEs Into a Single Advisory: The Tracking Problem
Debian published advisory DSA-6528-1 on September 29, 2026, consolidating 1,313 Linux kernel CVE identifiers into one security bulleti…
Dell System Update Critical 9.6 Bug Opens PowerEdge Servers to Remote Root
A path traversal vulnerability in Dell System Update allows unauthenticated remote code execution with root privileges. Version 2.3.0.…
Denmark: CPR Register Data Breach Exposes 8.8 Million Citizens
On October 2, 2026, the Danish government disclosed a national-scale breach of the CPR population register. Attackers abused the legit…
ClingSTUN: The Linux Backdoor That Turns Legitimate STUN Servers Into Covert Proxies
FortiGuard Labs has uncovered ClingSTUN, a Linux back-connect proxy backdoor that weaponizes the STUN protocol and exploits over two d…
Citrix NetScaler: Two Pre-Auth RCE Zero-Days Under Active Attack Since September 20
Citrix disclosed eight NetScaler ADC/Gateway vulnerabilities on September 27, 2026. Two — CVE-2026-88771 and CVE-2026-88772 — are pre-…
Microsoft Issues Out-of-Band Patch for CVE-2026-96940 in Exchange Server
CVE-2026-96940 carries a CVSS 8.8 score and allows an authenticated attacker to access other users' mailboxes. Microsoft released an e…
GlassWorm Hides Malware in VS Code Themes: Over 8,000 Installs Before Takedown
Socket Threat Research uncovered a GlassWorm campaign distributing malware through Visual Studio Code theme extensions published on bo…
Apple to Require More Explicit Consent for Full Disk Access, Citing Growing AI Agent Risks
Apple announced additional controls for the macOS Full Disk Access permission on October 2, 2026, warning that risks will grow substan…
Anthropic Adds Separate Opt-In for Claude Voice Data, Distinct From Chat Training
Anthropic has introduced a dedicated opt-in toggle for sharing voice recordings with its AI training pipeline. The control is off by d…
WhatsApp Ties Login to OS Patch State: No Sign-In on Outdated Systems
WhatsApp has activated a server-side check that blocks login on devices running outdated operating systems lacking current security pa…
RMM Tools Abused in 45% of Endpoint Incidents: The Trust Paradox in IT
Huntress reports that 45% of endpoint incidents in Q1 2026 leveraged legitimate RMM tools. Abuse surged 277% year-over-year in 2025, f…
TA419 Impersonates AI Experts in AitM Phishing: Report Details
Chinese espionage group TA419 used Evilginx reverse proxy and Frameless BitB to steal Microsoft 365 credentials from AI policy experts…
youX: 229,226 Australian Driver's Licenses Exposed in Broker Platform Breach
The fintech platform youX exposed data on 444,538 individuals across roughly 800 brokers. Driver's license numbers, financial records,…
Doxx.net Raises $38M from a16z to Isolate AI Agents from the Internet
On October 1, 2026, doxx.net announced a $38 million Series A led by Andreessen Horowitz, with Joel De La Garza joining the board. The…
CISA Adds Zammad Zero-Days to KEV: Federal Deadline Set for Oct. 5
CISA added two zero-day vulnerabilities in Zammad to its Known Exploited Vulnerabilities catalog, both rated CVSS 9.4. Federal Civilia…
CVE-2026-71885: Identity Spoofing in Bouncy Castle MLS with CVSS 9.2
A flaw in the binding between an X.509 certificate and its signing key enables full impersonation in encrypted groups. Version 1.86 wi…
Google Suspends Open-Source Bug Bounty After AI-Generated Spam Flood
On October 1, 2026, Google halted product vulnerability submissions for its Open Source Software Vulnerability Reward Program (OSS VRP…
Relapse: PS5 Kernel Exploit via WebKit Vanishes from GitHub After Four Days
The Relapse jailbreak chain for PS5 disappeared from GitHub on October 3, 2026. It exploited vulnerabilities in JavaScriptCore and the…
Google Patches Fifth Chrome Zero-Day of 2026: Active Exploit in V8 Engine
Google released an emergency Chrome update on June 9, 2026, fixing CVE-2026-11645, an out-of-bounds read/write bug in the V8 JavaScrip…
CVE-2026-9862: Fortra BoKS Auto-Registration Service Becomes Gateway for Critical RCE
On June 15, 2026, CVE-2026-9862 was disclosed — a critical OS command injection vulnerability in the boks_autoregisterd service of For…