Cybersecurity Articles
579/69 Thursday, October 22, 2026 Researchers from Sophos have disclosed details of activity linked to the Bronze Sandcastle threat group, which has been tracked since mid-2025 and has targeted multiple organizations across Asia and Africa. A notable characteristic of the group’s activity is its use of DLL Sideloading through an unmodified version of Sandboxie, causing […]
578/69 Thursday, October 22, 2026 The U.S. Cybersecurity and Infrastructure Security Agency (CISA), together with the Federal Bureau of Investigation (FBI), U.S. Secret Service (USSS), the State Criminal Police Office of Rhineland-Palatinate in Germany, and U.K. law enforcement agencies, has issued an advisory on the SafePay ransomware group, which has remained actively involved in ransomware […]
577/69 Thursday, October 22, 2026 OpenAI disclosed two incidents involving two AI agent models that reduced or disabled mechanisms designed to monitor potentially misaligned behavior while performing routine coding and code modification tasks. Neither incident resulted from an external attack. Instead, both stemmed from how the agents interpreted user instructions in ways that weakened the […]
576/69 Wednesday, October 21, 2026 Siemens has confirmed exploitation of CVE-2026-110936 in Siemens Software Center, a DLL Sideloading or Uncontrolled Search Path Element vulnerability rated High with a CVSS v4.0 score of 8.4. The flaw has been used in the Romulus ClickFix campaign to execute malicious commands and install a Remote Access Trojan (RAT) on […]
575/69 Wednesday, October 21, 2026 Revolut, a financial technology company providing digital banking services, has disclosed a major service outage affecting financial operations across multiple countries worldwide. Tens of thousands of users reported problems accessing the Revolut application, mobile banking services, and transfers between accounts. The company said the disruption began on the morning of […]
574/69 Wednesday, October 21, 2026 A U.S. court has granted the government’s request to detain a 35-year-old former OpenAI engineer who is accused of secretly installing an audio recording device in an executive meeting room at the company’s San Francisco headquarters in an alleged attempt to obtain confidential corporate information. Reports state that the suspect […]
573/69 Tuesday, October 20, 2026 Reports have confirmed active exploitation of CVE-2026-106931 in SiteGuard Server Edition, a server-based Web Application Firewall (WAF). The vulnerability is an OS Command Injection flaw affecting the Statistics function, which is enabled by default. Successful exploitation could allow attackers to execute commands on affected systems with root or SYSTEM privileges. […]
572/69 Tuesday, October 20, 2026 ConnectWise, a provider of IT management and cybersecurity solutions, announced the suspension of its Cloud Backup service, formerly known as SkyKick, along with the temporary shutdown of its SaaS Security and Cloud Management services. The action followed the discovery that attackers had gained unauthorized access to seven application identities and […]
571/69 Tuesday, October 20, 2026 The developer of a WordPress plugin has confirmed that some Rank Math PRO download files distributed through its official website were modified with malware in a supply chain attack. Users who downloaded version 3.0.123 between 20:02 UTC on October 15 and 07:12 UTC on October 16 may have received a […]
570/69 Monday, October 19, 2026 Researchers from Darktrace have disclosed a malware campaign involving CikaBika Bot, a Rust-based Remote Access Trojan (RAT) targeting Windows systems. The malware uses Discord as its Command-and-Control (C2) channel to receive commands and control infected machines, while Ngrok is used to exfiltrate data. The attack involves a disk image containing […]
