532/69 Monday, September 28, 2026 Cybersecurity researchers from Ontinue have disclosed a campaign involving Malware-as-a-Service known as Lunex, also referred to as Psychedelic Stealer, which is expanding its attacks against users across multiple countries. Initial findings show that threat actors are using fake websites that imitate Cloudflare verification pages to trick users into downloading the […]
531/69 Friday, September 25, 2026 Researchers from Gambit Security have disclosed a campaign in which attackers used open-source AI tools, including Strix, Cairn, and Hermes, to support attacks against organizations, particularly online retailers. The campaign has been active since July 2026, and between September 10 and 15, researchers observed 105 attack activities and confirmed that […]
530/69 Friday, September 25, 2026 The LastPass Threat Intelligence, Mitigation, and Escalation team, together with Delphos Labs, disclosed a multi-stage malware campaign impersonating the LastPass brand on GitHub to trick users into downloading a fake LastPass Authenticator installer. The fraudulent GitHub page was discovered on August 13, 2026, after appearing in search results for “LastPass […]
529/69 Friday, September 25, 2026 IonQ, a developer of quantum computing hardware and software, has successfully developed a quantum error-correction decoder capable of operating in real time on a single standard central processing unit (CPU). The innovation is designed to address a key bottleneck caused by latency when classical computers are used to process quantum […]
528/69 Thursday, September 24, 2026 Researchers from DepthFirst have disclosed technical details and exploit code for CVE-2026-80521, a Linux Kernel vulnerability with a CVSS score of 7.8. The flaw is a use-after-free vulnerability in the AF_UNIX subsystem. The published exploit was tested against Ubuntu 26.04 LTS and can be used from within a container to […]
527/69 Thursday, September 24, 2026 Researchers from Varonis Threat Labs have disclosed an attack technique named TrustSink that allows attackers with elevated privileges in an Identity Provider environment to register a rogue external MFA provider and use it to steal users’ passwords during an apparently legitimate login process. The technique may apply to identity providers […]
526/69 Thursday, September 24, 2026 The U.S. Federal Bureau of Investigation (FBI) is investigating a cybersecurity incident after the hacker group known as ShinyHunters claimed responsibility for attacking the agency’s recruitment website. Initial reports indicate that the website was defaced and that the recruitment portal remains unavailable. The attackers claim they gained access to the […]
525/69 Wednesday, September 23, 2026 Microsoft has revised the classification of CVE-2026-65660 in SharePoint Server, changing it from a spoofing vulnerability with a CVSS score of 6.5 to a High-severity Remote Code Execution (RCE) vulnerability with a CVSS score of 8.8 after additional details about its impact were disclosed. The vulnerability affects SharePoint Server 2016, […]
524/69 Wednesday, September 23, 2026 BigCommerce, a cloud-based SaaS e-commerce platform, has notified multiple merchants of a data breach after attackers compromised credentials belonging to the third-party applications Ribon and Ribon 1.5, developed by Be A Part Of, a subsidiary of Fastr. The attackers then used those credentials to inject malicious scripts into merchants’ online […]
523/69 Wednesday, September 23, 2026 Reports indicate that in late August, hackers attempted cyberattacks targeting the Operational Technology (OT) systems of two small private water utilities in Colorado, United States. Although the incidents involved attempts to interfere with operational systems, the utilities were able to respond and contain the risk quickly. As a result, there […]
