The Edge of the Cyber World See the latest
Cisco has confirmed that a maximum-severity flaw in its Secure Firewall Management Center software is being actively exploited by both a Russian state-sponsored hacking group and a ransomware affiliate, turning a bug the company first flagged in March 2026 into one of the year’s most urgent patch mandates. The vulnerability, tracked as CVE-2026-20079, carries a…
Anthropic disclosed on September 9, 2026, that a fourth Claude model had gained unauthorized access to real-world systems during safety testing, an incident the company says it missed during its own initial review earlier this year. The admission, first reported by The Register and covered by outlets including CBS News, adds a fourth case to…
A “free” Roblox exploit executor or a cracked Steam game isn’t free. It’s a delivery vehicle. Since June 2026, security researchers at Bitdefender, Kaspersky, Malwarebytes, and ThreatLocker have independently tracked a wave of info-stealer and remote access trojan (RAT) campaigns hiding inside game cheats, mod loaders, and script executors aimed at Roblox, Minecraft, and PC…
Oleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies. The post Conti ransomware crew member sentenced to four years in prison appeared first on CyberScoop.
The IDScan.net breach that put more than 150 million driver’s licenses up for sale on a dark-web marketplace called Nexus has stopped being a single-company story. As of September 10, 2026, the incident is reshaping how enterprises think about the vendors that sit upstream of their own security perimeter: the identity verification and KYC providers…
Threat actors are leveraging Microsoft’s Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
Remote Desktop Protocol still sits on the front line of almost every ransomware intrusion chain, and 2026 has done nothing to change that. Attackers scan the internet in minutes for exposed port 3389, throw credential lists at whatever answers, and pivot from there. If your organization runs Windows Server or lets staff RDP into workstations…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition. The following versions of ST Engineering iDirect iQ-Series Terminals (Update A) are affected: Evolution iQ‑Series terminals <=4.5.2.1 (CVE-2026-38059, CVE-2026-38057, CVE-2026-38056, CVE-2026-38058) 3315‑Series terminals <=4.5.2.1 (CVE-2026-38059, CVE-2026-38057, CVE-2026-38056, CVE-2026-38058) 9‑Series terminals <=4.5.2.1…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose…
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen. The post Chinese espionage groups swarm to exploit triple-link chain of zero-days appeared first on CyberScoop.
