Cybersecurity Articles
470/69 Friday, August 28, 2026 PaperCut has issued an urgent advisory after discovering that attackers are exploiting a vulnerability in PaperCut NG and PaperCut MF, enterprise print management software products. The attacks are being carried out as zero-day exploitation and affect all versions of the products. The company stated that customer environments have already been […]
468/69 Thursday, August 27, 2026 Threat intelligence company Defused disclosed that it detected attempts to attack Microsoft SharePoint by chaining two vulnerabilities: CVE-2026-55040, an authentication bypass vulnerability in JWT token validation, and CVE-2026-63520 in Business Connectivity Services (BCS). When used together, these vulnerabilities could allow code execution on unpatched SharePoint servers. Proof-of-concept (PoC) exploit code […]
467/69 Thursday, August 27, 2026 The Norwegian Digitalization Agency, or Digitaliseringsdirektoratet (Digdir), disclosed that Norway’s central government digital infrastructure was affected by a large-scale Distributed Denial-of-Service (DDoS) attack starting at 03:38 CEST on Monday. The attack disrupted services used by government agencies and the public, targeting infrastructure that supports Digdir’s services and its operations provider, […]
466/69 Thursday, August 27, 2026 Reports indicate that threat actors have abused the npm package registry and websites that mirror package data as hosting locations for malicious HTML files. These webpages are designed to impersonate Cloudflare CAPTCHA verification pages to deceive visitors and redirect them to attacker-controlled websites. The incident is notable because it differs […]
465/69 Wednesday, August 26, 2026 Security researchers have disclosed attacks targeting WordPress websites by exploiting two Critical vulnerabilities, CVE-2026-61979 and CVE-2026-15981, in the miniOrange SAML 2.0 Single Sign On plugin. The vulnerabilities can be chained to forge SAML responses and bypass authentication, allowing attackers to log in with website administrator privileges. Patchstack has already detected […]
464/69 Wednesday, August 26, 2026 Reports indicate that cybercriminals are exploiting the hype surrounding leaked information about Grand Theft Auto VI, or GTA VI, to trick users into downloading fake game files containing malware. A 113 GB file was found claiming to be a playable build of GTA VI. However, analysis by users on the […]
463/69 Wednesday, August 26, 2026 Cybersecurity researchers have detected the spread of WeedHack malware targeting gamers. Threat actors created fake websites impersonating providers of Minecraft add-ons or clients. Reports indicate that access to these malicious websites has already been detected and blocked more than 6,000 times. The attackers used search engine optimization poisoning, or SEO […]
462/69 Tuesday, August 25, 2026 Security researchers have disclosed a Critical vulnerability, CVE-2026-18963, in Keycloak, an Identity and Access Management (IAM) system. The vulnerability has a CVSS severity score of 9.1 and occurs in the password reset process. It could allow unauthenticated attackers to change passwords and take over user accounts, including administrator accounts, without […]
461/69 Tuesday, August 25, 2026 Slovakia’s National Security Authority (NBÚ) has issued a warning about risks associated with the use of several types of road speed cameras. The agency stated that these devices could pose a significant threat because they are network-connected systems that collect vehicle data, process license plate information, and communicate with other […]
460/69 Tuesday, August 25, 2026 Anthropic has officially announced expanded access to the cybersecurity capabilities of its advanced AI model, Mythos 5, for defenders through integrations with cybersecurity partners, updates to Claude Security, and the expansion of its Cyber Verification Program. The company also introduced the Defender Advantage Fund (0xDAF), a USD 35 million fund […]
