1. ConnectWise suspended its Cloud Backup service after attackers compromised application identities and breached Microsoft 365 tenants, with one credential used to sign in to 173 tenants (The Hacker News, BleepingComputer).
2. A suspected Chinese state-backed group is exploiting a BeyondTrust Remote Support zero-day in espionage attacks, with patches now available after exploitation since August (The Record, Dark Reading).
3. Drupal patched two critical remote code execution flaws affecting all supported versions, warning that public exploits may emerge soon (BleepingComputer).
4. A critical BlockStrap vulnerability, CVE-2026-103849, allows arbitrary PHP code execution on Magento and Adobe Commerce servers, with researchers warning of imminent exploitation (BleepingComputer).
5. Burger King Japan disclosed a data breach exposing 11.18 million customer records after attackers accessed a server (BleepingComputer).
6. Attackers tampered with AOMEI Backupper update servers in short bursts between May and July 2026, delivering a backdoor to Windows users during five to ten minute windows (The Hacker News, Google Cloud).
7. Researchers demonstrated an OpenBSD root exploit chaining a 37-year-old shared-memory integer overflow with another kernel flaw, bypassing KARL and hardware protections (The Hacker News).
8. Candiru spyware was delivered to Al Jazeera Media Network devices via targeted online ads in zero-click attacks requiring only ad rendering (BleepingComputer).
9. A malicious npm package named imgdecode, part of the MALFEX supply chain campaign, hides a shellcode loader in a Windows native addon and remains available (The Hacker News).
10. APT group UAT-11985 used fake event invites to target Taiwan research affiliates with Google adversary-in-the-middle phishing to steal credentials and MFA codes (The Hacker News).
11. Anne Arundel County, Maryland, confirmed a data breach from August after ransomware claims, with investigators assessing exposed data (The Record).
12. Moscow police detained three suspected DataSuckers hackers linked to breaches in Ukraine and Russia following an attack on a restaurant chain (The Record).
13. Fake Claude and ChatGPT campaigns are surging, using ClickFix-like tactics to target developers and enterprise employees (Dark Reading).
14. A critical Symfony ReDoS vulnerability, CVE-2026-108082, allows one request to consume seconds of CPU (Reddit r/netsec).
15. Researchers demonstrated a guest-to-host KVM escape, CVE-2026-99999, named PwnEscape (Reddit r/netsec).
16. Hackers exploited a Collabora remote code execution flaw to backdoor Nextcloud servers (Reddit r/cybersecurity).
17. CERT-In confirmed AI agents breached Indian firms, operating undetected for days (Reddit r/cybersecurity).
18. The Justice Department announced coordinated actions against North Korean remote IT worker schemes affecting over 70 US companies (Reddit r/cybersecurity).
Be First to Comment