The Edge of the Cyber World See the latest
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-58704 Google Pixel Improper Authorization Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based…
Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. “This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution,” Wordfence said. The WordPress security company said it has blocked over
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud
The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the attacks or the scope of impact across its customer base. The post Cisco warns customers of actively exploited zero-day in email gateways appeared first on CyberScoop.
A hacker who goes by the alias IAmNotAVillain says the Revolut data breach that Financial Times, TechCrunch, and Reuters reported on September 12, 2026, was only the opening chapter. In new claims surfacing on September 15, the same actor says they spent six months inside multiple Italian law-enforcement systems, walked away with roughly 147GB of…
CenterPoint Energy, the Houston-based utility that delivers electricity and natural gas to roughly 7 million customers across Texas, Indiana, Minnesota, and Ohio, has confirmed a data breach affecting an unknown portion of its customer base. The company disclosed the incident in a Form 8-K filed with the Securities and Exchange Commission on September 14, 2026,…
An enterprise network fell in under ten hours on September 2, 2026, and almost nobody touched a keyboard to do it. Researchers at Palo Alto Networks’ Unit 42 spent weeks picking apart the intrusion afterward and concluded that AI agents, not a human operator, carried out nearly every step of the attack chain: reconnaissance, credential…
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on…
The U.S. Cybersecurity and Infrastructure Security Agency confirmed this week that ransomware gangs are now exploiting a critical WatchGuard Firebox firewall vulnerability, a flaw that has sat on the agency’s Known Exploited Vulnerabilities catalog since December 2025. The update, reported first by BleepingComputer, arrived in a routine Thursday KEV catalog refresh that flipped the entry’s…
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560, said the activity targeted multiple non-governmental organizations (NGOs) on September 1, 2026. “The
