Cybersecurity Articles
511/69 Thursday, September 17, 2026 Cybersecurity researchers from Elastic Security Labs have discovered a new financial malware operation named KREMLIN, which targets users of Google Chrome and Microsoft Edge. Activity linked to the malware has been observed since May 2025. The malware uses social engineering by disguising itself as financial or banking documents to trick […]
510/69 Wednesday, September 16, 2026 Wordfence disclosed that attackers have been exploiting CVE-2026-27540, a Critical vulnerability with a CVSS score of 9.8 in the WooCommerce Wholesale Lead Capture plugin for WordPress. The vulnerability affects version 2.0.3.1 and earlier. It allows unauthenticated attackers to upload PHP files to websites, potentially leading to command execution on the […]
509/69 Wednesday, September 16, 2026 Japan’s Digital Agency has disclosed an unauthorized access incident after attackers exploited a vulnerability in a VPN device to access the Government Solution Service (GSS), a shared IT infrastructure platform connecting 23 Japanese ministries and government agencies. The incident may have exposed approximately 246,000 records containing personal information of government […]
508/69 Wednesday, September 16, 2026 Reports indicate that the official verified Reddit account of the HBO Max streaming service was compromised by threat actors and used to distribute more than one hundred malware-laced advertisements. The campaign targeted users on both Windows and macOS. The attackers shifted their tactics to abuse the credibility of official social […]
507/69 Tuesday, September 15, 2026 Bitdefender has released a report identifying numerous Android apps in Google Play Early Access that may deceive users, including fake casino games, reward apps, money-making apps, misleading utility apps, and apps that may infringe trademarks of well-known brands or games. Early Access is intended to allow developers to test apps […]
506/69 Tuesday, September 15, 2026 GitLab disclosed CVE-2026-85706 on September 10, 2026. The vulnerability has a CVSS score of 10.0 and is a path traversal flaw in GitLab’s Repository Commits API. It could allow an unauthenticated attacker to send a single specially crafted HTTP request to read files that should not be accessible, such as […]
505/69 Tuesday, September 15, 2026 A U.S. federal court has sentenced 44-year-old Ukrainian national Oleksii Lytvynenko, a former lawyer who became a cybercriminal, to four years in prison for conspiracy to commit wire fraud over his involvement in the Conti ransomware operation. Conti was one of the cybercriminal groups responsible for significant global damage. Between […]
504/69 Monday, September 14, 2026 Anthropic disclosed that it detected attackers using Claude to support credential-harvesting operations by building a process to download and analyze more than 1.8 million Android application files, or APKs, from multiple app distribution sources. The goal was to identify secrets embedded in applications and use the discovered data as an […]
503/69 Monday, September 14, 2026 Reports indicate that attackers are exploiting Critical and High-severity vulnerabilities in JFrog Artifactory to bypass authentication, escalate privileges to administrator level, and install Rust-based backdoor malware on vulnerable self-hosted servers. A report from cloud security company Wiz confirmed observed attacks, including the chaining of CVE-2026-42018 and CVE-2026-42016 to access systems […]
502/69 Monday, September 14, 2026 Cybersecurity researchers from Gen Digital have warned of active exploitation of a high-severity vulnerability, CVE-2026-51990, in Sogou Input Method for Windows, a Chinese input application developed by Tencent. The vulnerability is a remote code execution (RCE) flaw that can be triggered when a user clicks a maliciously crafted link, known […]
