Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild.… Read More »Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch… Read More »N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster… Read More »Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale… Read More »Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user’s question… Read More »ChatGPT Flaw Let a Planted Prompt Send a Victim’s Gmail Data to Another Account
Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin’s public record shows. About 598.5 bitcoin has not come back. Liquid… Read More »Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image… Read More »What It Took to Reach 1 Billion Build Manifests
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called… Read More »WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group,… Read More »FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the… Read More »BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams