News Archive
2287 stories · page 6 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
NetScaler CVE-2026-88779 Exploited Before Publication
NetScaler's CVE-2026-88779 was exploited before its official publication date, leaving no patch window. The European Union's EUVD catalogue lists it as exploited.
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 2
AI agents have been observed attempting SQL injection attacks while searching government data, with investigators successfully tracing an AI agent's path from a research task to reconnaissance activities. This comes as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Zammad…
Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force
President Trump has reportedly named National Intelligence Director Jay Clayton to lead a newly established federal task force focused on artificial intelligence. This development follows a recent gathering at the White House where the President met with leading executives from various AI companies.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 117
The Warlock ransomware group has continued to leverage year-old vulnerabilities in Microsoft SharePoint to target critical infrastructure organizations, including water and telecom operators. This ongoing campaign was highlighted in a recent security newsletter, which also detailed several other significant cybersecurity developments.
ShinyHunters Suspect Detained in Jordan Helps FBI Track Down the Group
A suspected member of the ShinyHunters cybercrime group, Saif al-Din Khader, was reportedly detained in Jordan earlier this week and is now cooperating with the FBI. Khader, who has been identified by security journalist Brian Krebs as the alleged leader of ShinyHunters operating under the alias "Rey," is said to be assisting investigators in tracking down other members of the group.
Weekly Update 524: Live From Copenhagen
This week saw reports of two arrests linked to the ShinyHunters cybercrime group. The individuals, identified as Pepijn and Saif, were reportedly apprehended in the Netherlands. The arrests mark a significant development in the ongoing efforts to disrupt the activities of the ShinyHunters group, which has been associated with numerous high-profile data breaches and cyberattacks.
Anthropic asks Claude users to share voice data for AI model training
Anthropic has begun prompting users of its Claude AI assistant to voluntarily contribute their voice data for the purpose of training and enhancing its AI models. This new request appears when users engage with Claude's voice features, explicitly asking for permission to utilize audio recordings and voice chat data.
dompdf_project dompdf XSS flaw added to VulnCheck KEV
CVE-2022-28368, a cross-site scripting vulnerability in dompdf, was added to the VulnCheck Known Exploited Vulnerabilities catalogue. The flaw has a high EPSS score but is not listed by CISA or ENISA.
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
A 16-year-old security researcher has identified a vulnerability in Microsoft's internal analytics service, Titan, which could have exposed employee records and Bing search analytics. The flaw reportedly provided access to 17 trillion rows of data. Microsoft has not yet issued a public statement confirming the details of the vulnerability or its remediation.
Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure
The Warlock ransomware group, tracked by Symantec as Longlegs and also known as Storm-2603, continues to exploit unpatched vulnerabilities in Microsoft SharePoint, more than a year after these flaws were initially publicized. The group, which has historical ties to China-nexus clusters CL-CRI-1040, CamoFei, and ChamelGang, has recently targeted critical infrastructure, including water…
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
Reports indicate that an individual identified as "Rey," a suspected member of the ShinyHunters digital extortion group, has been detained by authorities in Jordan. This individual, reportedly named Saif al-Din Khader, is said to be cooperating with the FBI in efforts to identify other members of the cybercrime organization. This detention marks a significant development in ongoing law…
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A China-aligned cyber espionage group, designated TA419, has reportedly been observed targeting U.S. AI policy experts through sophisticated phishing campaigns. These operations are characterized by the impersonation of prominent individuals and the deployment of a technique known as Frameless Browser-in-the-Browser (BitB) to construct highly convincing fake Microsoft login pages. The primary…
Zyxel GS1900 Switch Flaw Exploited, Now in EU Catalogue
A stack-based buffer overflow in Zyxel GS1900-48HPv2 switches is now listed in the EU's common vulnerabilities exploited catalogue, following its inclusion in the US federal list.
Zammad Session Fixation Vulnerability Exploited Same Day as Disclosure
CVE-2026-102489, a session fixation vulnerability in Zammad GmbH Zammad, was exploited on the same day it was published. The vulnerability is now listed in multiple exploitation catalogues.
Zammad GmbH Zammad Vulnerability Exploited Same Day as Publication
CVE-2026-102490, an improper privilege management vulnerability in Zammad GmbH Zammad, was exploited on the same day it was published. It is now listed in multiple exploitation catalogues.
Linux Kernel Out-of-Bounds Write Exploited, Added to EUVD
A Linux kernel vulnerability, CVE-2026-53266, has been confirmed as exploited and added to the EUVD catalogue. This follows its inclusion in the CISA KEV list.
getarcane arcane SSRF Flaw Added to VulnCheck KEV
CVE-2026-40242, a Server-Side Request Forgery in getarcane arcane, was added to the VulnCheck KEV catalogue on September 17, 2026. It has been publicly exploited since April 10, 2026.
Google Gemini could soon get full access to your Mac’s files, apps and the web
Google appears to be developing a feature for its Gemini AI that would grant it extensive access to macOS systems, including the ability to read, modify, and delete files, interact with applications, and browse the web. This potential functionality was identified by TestingCatalog on X, which observed references to a hidden "Additional sandbox options" setting within the Gemini Desktop…
Kan Project Management Tool SSRF Flaw Exploited, Not on CISA KEV
A server-side request forgery vulnerability in the Kan project management tool has been confirmed as exploited. The flaw, CVE-2026-32255, has been listed on VulnCheck's Known Exploited Vulnerabilities catalog but not yet on CISA's.
Paytm Payment Gateway SSRF Flaw Added to VulnCheck KEV
CVE-2022-45362, a server-side request forgery vulnerability in Paytm's payment gateway, was added to the VulnCheck KEV catalog. It has been publicly exploited since at least December 2023.
CVE-2023-54405 Exploited Same Day as Publication
A vulnerability, CVE-2023-54405, was reported as exploited on the same day it was published. This flaw has an 'Unrestricted Upload of File with Dangerous Type' vulnerability.
CVE-2014-125130 Exploited Same Day as Publication
A path traversal vulnerability, CVE-2014-125130, was reported as exploited on the same day its CVE record was published. The vulnerability is listed in the VulnCheck KEV catalogue but not in CISA KEV or EUVD.
CVE-2020-37278 SSRF Exploited Same Day as Publication
A server-side request forgery vulnerability, CVE-2020-37278, was reportedly exploited on the same day it was published. The flaw has a zero-day patch window.
ShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBI
Authorities in Jordan have reportedly detained Saif al-Din Khader, known online as "Rey," a suspected prominent member of the ShinyHunters hacking group. Reports indicate that Khader is cooperating with the U.S. Federal Bureau of Investigation (FBI), a development that could significantly assist in ongoing efforts to identify and apprehend other individuals linked to the cybercrime collective.