466/69 Thursday, August 27, 2026 Reports indicate that threat actors have abused the npm package registry and websites that mirror package data as hosting locations for malicious HTML files. These webpages are designed to impersonate Cloudflare CAPTCHA verification pages to deceive visitors and redirect them to attacker-controlled websites. The incident is notable because it differs […]
465/69 Wednesday, August 26, 2026 Security researchers have disclosed attacks targeting WordPress websites by exploiting two Critical vulnerabilities, CVE-2026-61979 and CVE-2026-15981, in the miniOrange SAML 2.0 Single Sign On plugin. The vulnerabilities can be chained to forge SAML responses and bypass authentication, allowing attackers to log in with website administrator privileges. Patchstack has already detected […]
464/69 Wednesday, August 26, 2026 Reports indicate that cybercriminals are exploiting the hype surrounding leaked information about Grand Theft Auto VI, or GTA VI, to trick users into downloading fake game files containing malware. A 113 GB file was found claiming to be a playable build of GTA VI. However, analysis by users on the […]
463/69 Wednesday, August 26, 2026 Cybersecurity researchers have detected the spread of WeedHack malware targeting gamers. Threat actors created fake websites impersonating providers of Minecraft add-ons or clients. Reports indicate that access to these malicious websites has already been detected and blocked more than 6,000 times. The attackers used search engine optimization poisoning, or SEO […]
462/69 Tuesday, August 25, 2026 Security researchers have disclosed a Critical vulnerability, CVE-2026-18963, in Keycloak, an Identity and Access Management (IAM) system. The vulnerability has a CVSS severity score of 9.1 and occurs in the password reset process. It could allow unauthenticated attackers to change passwords and take over user accounts, including administrator accounts, without […]
461/69 Tuesday, August 25, 2026 Slovakia’s National Security Authority (NBÚ) has issued a warning about risks associated with the use of several types of road speed cameras. The agency stated that these devices could pose a significant threat because they are network-connected systems that collect vehicle data, process license plate information, and communicate with other […]
460/69 Tuesday, August 25, 2026 Anthropic has officially announced expanded access to the cybersecurity capabilities of its advanced AI model, Mythos 5, for defenders through integrations with cybersecurity partners, updates to Claude Security, and the expansion of its Cyber Verification Program. The company also introduced the Defender Advantage Fund (0xDAF), a USD 35 million fund […]
459/69 Monday, August 24, 2026 Security researchers have disclosed ToxicPanda 2.0, an Android malware strain that has added the ability to request VPN Service permissions to create a local interface for controlling network traffic on infected devices. This feature allows the malware to block communications from Google Play and Google Play Services, potentially interfering with […]
458/69 Monday, August 24, 2026 Researchers from Kaspersky have published a report on Android malware targeting car head units, or infotainment systems and certain control components in vehicles. They described it as the first documented case of malware infection on a car head unit through an update mechanism specific to this type of device. The […]
457/69 Monday, August 24, 2026 Leading hardware and processor chip manufacturers are accelerating the development of security capabilities by integrating post-quantum cryptography (PQC) into hardware to prepare for future cyber threats. Although quantum computers capable of breaking today’s cryptographic algorithms are still expected to take several years before reaching broad commercial availability, cybersecurity experts remain […]
