582/69 Monday, October 26, 2026 Researchers from Kaspersky have disclosed the discovery of BlackX, a UEFI bootkit that has been used in real-world attacks since early 2026. Attackers must first gain access to a system with Administrator privileges before exploiting the Baton Drop vulnerability (CVE-2022-21894) to bypass Secure Boot and load attacker-controlled EFI files. This […]
581/69 Monday, October 26, 2026 Capcom, a major Japanese video game developer and publisher, has disclosed a data breach involving its CAPCOM ID service, the company’s account system used to access games and online services, after detecting unauthorized access on October 19, 2026. According to the investigation as of October 22, attackers were able to […]
580/69 Monday, October 26, 2026 A security vulnerability has been reported in Tailscale SSH that could allow an attacker who has already compromised one device on a network to use it as a foothold to gain elevated, potentially root-level access to other servers within the same network. The issue was disclosed by security researchers from […]
579/69 Thursday, October 22, 2026 Researchers from Sophos have disclosed details of activity linked to the Bronze Sandcastle threat group, which has been tracked since mid-2025 and has targeted multiple organizations across Asia and Africa. A notable characteristic of the group’s activity is its use of DLL Sideloading through an unmodified version of Sandboxie, causing […]
578/69 Thursday, October 22, 2026 The U.S. Cybersecurity and Infrastructure Security Agency (CISA), together with the Federal Bureau of Investigation (FBI), U.S. Secret Service (USSS), the State Criminal Police Office of Rhineland-Palatinate in Germany, and U.K. law enforcement agencies, has issued an advisory on the SafePay ransomware group, which has remained actively involved in ransomware […]
577/69 Thursday, October 22, 2026 OpenAI disclosed two incidents involving two AI agent models that reduced or disabled mechanisms designed to monitor potentially misaligned behavior while performing routine coding and code modification tasks. Neither incident resulted from an external attack. Instead, both stemmed from how the agents interpreted user instructions in ways that weakened the […]
576/69 Wednesday, October 21, 2026 Siemens has confirmed exploitation of CVE-2026-110936 in Siemens Software Center, a DLL Sideloading or Uncontrolled Search Path Element vulnerability rated High with a CVSS v4.0 score of 8.4. The flaw has been used in the Romulus ClickFix campaign to execute malicious commands and install a Remote Access Trojan (RAT) on […]
575/69 Wednesday, October 21, 2026 Revolut, a financial technology company providing digital banking services, has disclosed a major service outage affecting financial operations across multiple countries worldwide. Tens of thousands of users reported problems accessing the Revolut application, mobile banking services, and transfers between accounts. The company said the disruption began on the morning of […]
574/69 Wednesday, October 21, 2026 A U.S. court has granted the government’s request to detain a 35-year-old former OpenAI engineer who is accused of secretly installing an audio recording device in an executive meeting room at the company’s San Francisco headquarters in an alleged attempt to obtain confidential corporate information. Reports state that the suspect […]
573/69 Tuesday, October 20, 2026 Reports have confirmed active exploitation of CVE-2026-106931 in SiteGuard Server Edition, a server-based Web Application Firewall (WAF). The vulnerability is an OS Command Injection flaw affecting the Statistics function, which is enabled by default. Successful exploitation could allow attackers to execute commands on affected systems with root or SYSTEM privileges. […]
