Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
GitHub Actions Mini Shai-Hulud Reactivated: Containment Turns Into Attack
Two GitHub Actions compromised in May came back online on September 16, 2026 with malicious tags intact, automatically executing paylo…
Astrana Health Breach via Vishing: SEC Filing in 24 Hours, Patients Still in the Dark
Astrana Health filed a Form 8-K with the SEC one day after detecting a vishing breach, but has yet to notify affected patients. The ga…
ThreatsDay 2026-09-24: Sixteen Headlines, One Fragment, No Blueprint
On September 24, 2026, a report titled ThreatsDay appeared with a headline promising sixteen stories: "AI Search Poisoning, AI Coding…
Warner and Cruz Propose Voluntary Telecom Security Framework
U.S. Senators introduce the Telecommunications Cybersecurity and Resilience Act, replacing mandatory FCC rules with a voluntary best-p…
Carbonato: The Botnet That Weapons AI Agents Against Exposed Docker Hosts
ThreatDown researchers have documented Carbonato, a malware campaign that exploits unauthenticated Docker API on port 2375 to deploy t…
Roundcube CVE-2026-48842: Passwordless Attack on Webmail
The Canadian Centre for Cyber Security confirms active exploitation of a pre-authentication SQL injection in Roundcube. Four months af…
CISA Confirms: TeamCity CVE-2026-63077 Now Used in Active Ransomware Campaigns
CISA updated the KEV catalog on September 23, 2026, designating CVE-2026-63077 as "Known" for ransomware use. The critical authenticat…
SolarWinds Patches Two RCE Flaws in Observability Self-Hosted: Configuration Is the Deciding Factor
SolarWinds released Observability Self-Hosted 2026.2.3 on September 22, 2026, fixing two unauthenticated remote code execution vulnera…
ConfigConfusion: One YAML File to Become Organization Owner in GCP
ConfigConfusion exploits Google Kubernetes Config Connector to escalate from a namespace user to Organization Owner without GCP creden…
The 90-Day Plan CISOs Didn't Know They Needed: Map the Data Path to Secure Agentic AI
On September 24, 2026, Nol8 CEO Kelly Herrell published a 90-day operational plan for securing data traversed by AI agents in producti…
ShinyHunters Claims FBI Breach in Retaliation for IC3 Report
ShinyHunters posted a retaliatory statement against the FBI over a May 15, 2026 report. The group denies swatting and sextortion alleg…
Luxion KeyShot: RCE Vulnerability in BIP Files, Patch Available
ZDI-26-748 (CVE-2026-92202, CVSS 7.8) enables remote code execution via a malicious BIP file. Luxion has released a corrective update.