News Archive
2287 stories · page 17 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
HBO Max Reddit account compromised to serve ClickFix attacks
The official Reddit account for HBO Max, u/hbomax, was compromised and used to distribute over 100 malicious advertisements, serving ClickFix attacks designed to infect both Windows and macOS devices with information-stealing malware. The incident was part of a broader "massive 48-hour malvertising blitz" that researchers have dubbed PasteSwitch.
Apple parental controls in iOS 27 let kids ask before opening new websites
Apple has released a comprehensive overhaul of its child-safety features across its device ecosystem, requiring iOS 27, iPadOS 27, and macOS 27. The new tools, which went live on September 14 after a June preview, are centered around the Child Account, which is mandatory for users under 13 and available for those up to 18. Apple emphasizes that without a Child Account, these age-based…
Cybersecurity jobs available right now: September 15, 2026
The cybersecurity job market continues to show robust demand across various specializations, with a notable emphasis on artificial intelligence (AI) security, cloud environments, and critical infrastructure protection. As of September 15, 2026, numerous roles are available globally, ranging from entry-level specialists to executive leadership positions.
Microsoft releases emergency Windows updates to fix RDS failures
Microsoft has released emergency out-of-band updates for various Windows versions to address critical issues, including Remote Desktop Services (RDS) failures, Hyper-V problems, and USB audio malfunctions. These issues were introduced by the security updates deployed earlier in September 2026.
Japan's Digital Agency says VPN flaw exposed 246,000 personnel records
Japan's Digital Agency has confirmed a data breach that potentially exposed personal information for approximately 246,000 individuals, primarily government employees and associated personnel. The breach originated from an exploited vulnerability in a VPN device utilized by the Government Solution Service (GSS).
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
A critical path traversal vulnerability, identified as CVE-2026-85706, has been reported in GitLab, impacting both its Community Edition (CE) and Enterprise Edition (EE) instances. The flaw carries a maximum CVSS score of 10.0, indicating its severe potential for exploitation and the significant risk it poses.
New York Seizes a Dozen Celebrity Deepfake Websites
The Manhattan District Attorney’s Office has announced the seizure of 12 websites involved in the creation, publication, and sale of nonconsensual deepfake videos, primarily targeting women. This action, described as potentially the largest takedown of explicit deepfake sites to date, follows investigations into platforms that have depicted approximately 1,200 individuals, including…
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
A widespread scanning campaign is targeting internet-exposed Vite development servers to steal cloud credentials and configurations, particularly for AWS and Azure deployments. The attacks leverage a high-severity vulnerability, CVE-2026-39364, which affects Vite versions 7.1.0 through 7.3.2 and the 8.x branch before 8.0.5. This flaw, disclosed on April 7, enables an unauthenticated attacker…
Pro-Ukraine Hacking Cat group deploying new malware against Russian targets
A pro-Ukraine hacktivist group known as Hacking Cat has reportedly escalated its operations against Russian targets, moving from website defacements and data leaks to more destructive attacks involving data encryption and destruction. Cybersecurity researchers have identified new custom-built hacking tools associated with the group, which has been active since approximately February 2024.
CISOs Race to Control AI Agents Without Destroying Their Value
Chief Information Security Officers (CISOs) are reportedly facing a significant challenge in establishing effective controls over AI agents within their organizations. The core of the issue lies in balancing the imperative for robust security with the need to preserve the operational value and utility these agents offer. This struggle highlights a new frontier in cybersecurity, where…
Hackers Exploit Maximum Severity Flaw in GitLab
GitLab has urged users to patch a critical vulnerability, identified as CVE-2026-85706, following reports of active exploitation. The flaw, described as an "improper limitation of a pathname to a restricted directory" or "path traversal," affects all versions of GitLab CE/EE from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2.
Telus Warns Customers of Account Breaches
Telus, a major telecommunications provider, has reportedly warned its customers about account breaches stemming from a multi-month campaign. The incidents involved the use of stolen credentials to gain unauthorized access to subscriber personal data and billing records. This disclosure indicates a sustained effort by malicious actors to compromise customer accounts over an extended period.
Certificate failures can cost firms over $250,000
Enterprises face significant challenges and financial risks due to inadequate digital certificate management, with a substantial number experiencing costly service outages from expired or mismanaged certificates. A recent report indicates that nearly one in four organizations reported their most severe certificate incident cost over $250,000.
AWS puts AI vulnerability detection to the test, and false positives pile up
Amazon Web Services (AWS) has introduced a new benchmark designed to evaluate how effectively artificial intelligence models can differentiate between genuine security vulnerabilities and code that merely appears risky but is actually safe. The "Deception Benchmark" aims to address the challenge of high false-positive rates in AI-driven vulnerability detection, which can lead to increased…
Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI
The National Security Agency (NSA) is undergoing a significant reorganization, transitioning from its current directorate structure to five new "mission centers." This restructuring aims to accelerate the delivery of intelligence to military operations. The new centers will focus on China, cybersecurity, artificial intelligence (AI), combat support, and global intelligence.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114
Attackers are actively exploiting a critical vulnerability in Cisco Secure Firewall Management Center (FMC) to deploy Qilin ransomware, according to recent reports. The flaw, which has not yet been assigned a CVE identifier in the provided information, allows for the deployment of ransomware, indicating a significant risk to affected systems.
Hackers exploit Tencent app flaw to deploy GrayRabbit malware
Threat actors identified as UNC3569, a group suspected of operating on behalf of China, have been observed actively exploiting a critical vulnerability in Tencent's Sogou Input Method for Windows. The flaw, tracked as CVE-2026-51990, is a one-click remote code execution (RCE) vulnerability that allows attackers to deploy the GrayRabbit backdoor.
Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION
Google has released a patch for the seventh actively exploited zero-day vulnerability found in its Chrome browser this year. The flaw, identified as a V8 zero-day, allows for code execution within the browser's sandbox environment.
Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up
Anthropic CEO Dario Amodei has reportedly stated that the artificial intelligence industry needs to allow more time for safety measures to mature. Amodei's warning highlighted a potential scenario within the next six to twelve months where AI could develop the capability to orchestrate a "swarm of agents" that might compromise the entire internet.
GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours
GitLab has confirmed that a critical path traversal vulnerability, identified as CVE-2026-85706, is being actively exploited in the wild, with initial probes detected within 24 hours of its public disclosure. The flaw, which carries a CVSS score of 10.0, affects the repository commits API in GitLab Community Edition and Enterprise Edition.
Security through obscurity is dead, and AI delivered the fatal blow
The long-held, if often criticized, principle of "security through obscurity" has been rendered obsolete by the advent of artificial intelligence, according to cybersecurity experts and recent incident reports. This strategy, which relied on keeping system architectures and vulnerabilities secret to deter attackers, is now demonstrably ineffective as AI agents are proving adept at uncovering…
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft has reported details concerning two distinct campaigns where threat actors leveraged third-party email delivery infrastructure to distribute financial fraud scam messages. These campaigns employed passkey-themed social engineering tactics to compromise cloud environments, ultimately leading to the hijacking of Microsoft cloud accounts and subsequent data exfiltration.
Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence
A Ukrainian national involved in the Conti ransomware operation, Oleksii Oleksiyovych Lytvynenko, has been sentenced to four years in a U.S. federal prison for conspiracy to commit wire fraud. The 44-year-old, formerly residing in Cork, Ireland, pleaded guilty to the charge on June 10, 2026.
Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
Attackers have deployed a Linux rootkit on F5 BIG-IP APM devices, utilizing a method that hides a web shell in memory rather than writing it to disk. This technique makes detection more challenging for traditional security tools. F5 BIG-IP APM is a system designed for enforcing access policies.