The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat Hunter Team, has hit critical infrastructure, government, and education organizations. “In the
A new wave of leaked material is pointing to the biggest overhaul the Pokémon franchise has attempted in decades. Reports breaking on October 2 and October 3, 2026, claim that Pokémon Winds and Waves, the unconfirmed codename for the Generation 10 mainline games, will take place in an open-world region built from roughly 100 islands,…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding…
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek.
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.
Organizations don’t need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them.
One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.
UK Counter Terrorism Policing arrested a 27-year-old dual British-Iranian national in Westminster, London, on Thursday, October 1, 2026, becoming the sixth person detained in an escalating investigation into a suspected bomb plot near RAF Fairford, a Royal Air Force station in Gloucestershire used by the United States Air Force. The man was arrested on suspicion…
Fuse Games founder and CEO Matt Webster is set to take the stage at Game Republic New Horizons, a UK games industry conference, to discuss the development of Star Wars: Galactic Racer, according to Video Games Chronicle. The session lands just over a week after the Guildford-based studio’s debut title launches on October 6, 2026,…