Cybersecurity Articles
537/69 Wednesday, September 30, 2026 Apple has released security updates to address CVE-2026-86950, an out-of-bounds write vulnerability in the CoreGraphics component. Processing a specially crafted file could lead to code execution on an affected device. Apple stated that it received a report indicating the vulnerability may have been exploited in an extremely sophisticated attack against […]
536/69 Wednesday, September 30, 2026 SOCRadar has released an analysis of stealer log data collected over the past 90 days, identifying 482 organizations with exposed AI accounts or credentials. Of these, 295 organizations appeared in logs that remained active during the same period, indicating that many of the risks were linked to recent activity rather […]
535/69 Wednesday, September 30, 2026 Keio Corporation, a major private railway and hotel operator in Japan, confirmed that it was hit by a ransomware attack on the morning of September 26, 2026, prompting the company to shut down parts of its network to prevent further damage. Over the same weekend, Tokyo Metro, another major Japanese […]
534/69 Monday, September 28, 2026 Qrator Research Labs has disclosed the discovery of x47.c, a Windows botnet being advertised with multiple capabilities, including DDoS attacks, credential theft, SOCKS5 proxy creation, and an AI API Drain feature designed to consume credits or generate charges on AI service accounts. The botnet also includes an AI Stealth module […]
533/69 Monday, September 28, 2026 OpenAI confirmed that it is aware of a security incident in which AI agents unintentionally uploaded user-provided images to third-party image-hosting services. The company stated that the vast majority of users were not affected. An initial investigation identified 53 cases in which images were posted as links on image-hosting websites […]
532/69 Monday, September 28, 2026 Cybersecurity researchers from Ontinue have disclosed a campaign involving Malware-as-a-Service known as Lunex, also referred to as Psychedelic Stealer, which is expanding its attacks against users across multiple countries. Initial findings show that threat actors are using fake websites that imitate Cloudflare verification pages to trick users into downloading the […]
531/69 Friday, September 25, 2026 Researchers from Gambit Security have disclosed a campaign in which attackers used open-source AI tools, including Strix, Cairn, and Hermes, to support attacks against organizations, particularly online retailers. The campaign has been active since July 2026, and between September 10 and 15, researchers observed 105 attack activities and confirmed that […]
530/69 Friday, September 25, 2026 The LastPass Threat Intelligence, Mitigation, and Escalation team, together with Delphos Labs, disclosed a multi-stage malware campaign impersonating the LastPass brand on GitHub to trick users into downloading a fake LastPass Authenticator installer. The fraudulent GitHub page was discovered on August 13, 2026, after appearing in search results for “LastPass […]
529/69 Friday, September 25, 2026 IonQ, a developer of quantum computing hardware and software, has successfully developed a quantum error-correction decoder capable of operating in real time on a single standard central processing unit (CPU). The innovation is designed to address a key bottleneck caused by latency when classical computers are used to process quantum […]
528/69 Thursday, September 24, 2026 Researchers from DepthFirst have disclosed technical details and exploit code for CVE-2026-80521, a Linux Kernel vulnerability with a CVSS score of 7.8. The flaw is a use-after-free vulnerability in the AF_UNIX subsystem. The published exploit was tested against Ubuntu 26.04 LTS and can be used from within a container to […]
