The Edge of the Cyber World See the latest
Thomson Reuters disclosed on September 2, 2026, that an unauthorized party accessed files from its C-Track court case management platform, exposing sensitive records tied to courts in 11 US states, the US Virgin Islands, and three courts in Ontario, Canada. The disclosure lands in the same week as reporting on a separate 153 million driver’s…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security…
Enterprise technology buyers spent the first week of September 2026 recalibrating their AI roadmaps after OpenAI CEO Sam Altman told reporters at the G20 Innovation Ministerial that the company’s next generation of models will be “sobering for everybody.” The remark, paired with an admission that OpenAI is deliberately slowing how fast it ships new capability,…
Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence. The vulnerabilities in question are – CVE-2026-14894 (CVSS score: 9.8) – A missing file type validation vulnerability in Super Forms – Drag & Drop Form Builder that allows unauthenticated attackers to upload files of…
A new business-impact study from data security firm Cohesity is putting a hard number on something most executives have only felt anecdotally: a serious cyberattack now costs a company roughly 15% of its annual revenue, according to CEOs surveyed for the research. The findings, detailed in a September 3, 2026 report from Insurance Edge titled…
A China-linked hacking crew tracked as Storm-1175 has walked away from Medusa, the ransomware-as-a-service strain it rode for years, and started deploying a new, privately built encryptor called StormEncryptor. The switch surfaced on August 2, 2026, the same day a critical authentication-bypass flaw in N-able’s N-central remote monitoring and management console, tracked as CVE-2026-18577, went…
Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers.
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net. The post 153 Million Driver License Images Offered on Dark Web appeared first on SecurityWeek.
Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an underground marketplace commercializing access to compromised hosts. “Unlike the standard infostealer model, BraZetsu is a comprehensive master toolkit that empowers Initial Access Brokers (IABs) by turning compromised systems into highly valuable commercial
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment (CI/CD) tooling, cloud configurations, and even AI tool configs. Earlier variants of the infostealer worm only checked 189 paths. The jump says a lot. Attackers have
