1. Citrix released emergency patches for CVE-2026-88779, a high-severity NetScaler ADC and Gateway memory overflow vulnerability exploited in targeted zero-day attacks that can knock SAML deployments offline, with researchers investigating potential remote code execution. (BleepingComputer, The Hacker News)
2. Attackers are actively exploiting CVE-2026-61500, a critical Rejetto HTTP File Server flaw with a CVSS score of 9.3, which allows admin session forgery via a weak pseudo-random number generator and can lead to remote code execution. (The Hacker News)
3. The U.S. CISA added a Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog, indicating confirmed active exploitation of the vulnerability. (Reddit r/cybersecurity)
4. A suspected ShinyHunters member known as Rey, real name Saif al-Din Khader, was detained in Jordan on September 29, 2026, and is cooperating with the FBI to identify other group members linked to the FBI data theft. (The Hacker News, BleepingComputer)
5. China-aligned threat actor TA419 conducted credential phishing campaigns targeting U.S. AI policy experts at think tanks, universities, and legal organizations, impersonating prominent economists and an Anthropic employee. (The Hacker News)
6. The suspected China-linked threat actor Warlock continues to exploit Microsoft SharePoint vulnerabilities, both old and new, to disable security tools and deploy ransomware against organizations in Portuguese- and Spanish-speaking countries. (The Hacker News)
7. The Technical University of Denmark suffered a data breach affecting up to 200,000 people after hackers accessed its identity and access management system and downloaded a large amount of data. (BleepingComputer)
8. Hacks of two U.S. federal agencies within a month have resulted in a significant exposure of sensitive data, according to reports. (Reddit r/cybersecurity)
9. The U.K. intelligence agency MI5 warned that over 100 academics helped China’s state security service gather intelligence through funded research via the China General Technology Research Institute. (The Hacker News)
10. Microsoft confirmed that the September 2026 Windows 11 preview update KB5124010 causes crashes in some games and applications that use AC-3 Dolby Digital audio decoding. (BleepingComputer)
11. Google suspended submissions to its Open Source Software Vulnerability Rewards Program due to being flooded with AI-generated spam reports. (BleepingComputer)
12. A new China-nexus cyber espionage group, TA419, was attributed to multiple credential phishing campaigns targeting AI experts in the U.S., impersonating policymakers and employees of major AI firms. (The Hacker News)
13. Researchers found remote code execution and bad cryptography in Internxt’s post-quantum cloud storage offering, highlighting significant security flaws. (Reddit r/netsec)
14. A Dark Reading reader poll indicates that AI-powered attacks are fast, relentless, and automated, prompting security teams to rethink their strategies to keep up. (Dark Reading)
15. Reports indicate a rise in fake invoice emails at workplaces, with the volume of such phishing attempts becoming increasingly problematic. (Reddit r/cybersecurity)
Be First to Comment