Cybersecurity Articles
505/69 Tuesday, September 15, 2026 A U.S. federal court has sentenced 44-year-old Ukrainian national Oleksii Lytvynenko, a former lawyer who became a cybercriminal, to four years in prison for conspiracy to commit wire fraud over his involvement in the Conti ransomware operation. Conti was one of the cybercriminal groups responsible for significant global damage. Between […]
504/69 Monday, September 14, 2026 Anthropic disclosed that it detected attackers using Claude to support credential-harvesting operations by building a process to download and analyze more than 1.8 million Android application files, or APKs, from multiple app distribution sources. The goal was to identify secrets embedded in applications and use the discovered data as an […]
503/69 Monday, September 14, 2026 Reports indicate that attackers are exploiting Critical and High-severity vulnerabilities in JFrog Artifactory to bypass authentication, escalate privileges to administrator level, and install Rust-based backdoor malware on vulnerable self-hosted servers. A report from cloud security company Wiz confirmed observed attacks, including the chaining of CVE-2026-42018 and CVE-2026-42016 to access systems […]
502/69 Monday, September 14, 2026 Cybersecurity researchers from Gen Digital have warned of active exploitation of a high-severity vulnerability, CVE-2026-51990, in Sogou Input Method for Windows, a Chinese input application developed by Tencent. The vulnerability is a remote code execution (RCE) flaw that can be triggered when a user clicks a maliciously crafted link, known […]
501/69 Friday, September 11, 2026 Researchers from SOCRadar reported exploitation of CVE-2025-25249, a vulnerability with a CVSS score of 7.4 in FortiOS and FortiSwitchManager, to install PivotC2 malware on FortiGate devices. The vulnerability is a heap-based buffer overflow flaw that could allow unauthenticated attackers to execute commands through specially crafted data. Fortinet released patches for […]
500/69 Friday, September 11, 2026 Trezor, a cryptocurrency hardware wallet manufacturer, has warned customers after attackers compromised an external email provider used by the company and abused it to send phishing emails to customers. The fake emails used subject lines such as “Critical Security Alert” and claimed that a vulnerability had been found in the […]
499/69 Friday, September 11, 2026 The CERT Coordination Center at Carnegie Mellon University (CERT/CC) has issued an advisory warning users of Skullcandy Dime 3 wireless earbuds about a cybersecurity risk after discovering that the earbuds accept Bluetooth pairing requests from unknown nearby devices without requiring user authentication. The issue directly affects earbuds running firmware version […]
498/69 Thursday, September 10, 2026 Researchers from Nebty detected a fake online store network named DoppelCart, which is linked to more than 119,000 domains. The network impersonates legitimate stores and brands to steal personal information and payment card data. According to scans disclosed by the researchers, more than 105,000 fake stores in the network remain […]
497/69 Thursday, September 10, 2026 Plex has issued an advisory urging administrators to update Plex Media Server and Plex Desktop after multiple security vulnerabilities were identified, though no official CVE identifiers have been assigned for tracking. The vulnerabilities affect Plex Media Server version 1.43.2 and earlier. Plex recommends that users upgrade Plex Media Server to […]
496/69 Thursday, September 10, 2026 In early September, cybersecurity researchers from KnowBe4 reported the discovery of a new phishing campaign in which threat actors abused features across multiple Google services to evade detection by security systems. The attackers created a redirection chain using trusted Google domains to deceive email filtering systems and other security tools, […]
