The Edge of the Cyber World See the latest
Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The post Malicious Virtualizor Update Served via BGP Hijacking appeared first on SecurityWeek.
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as
OpenAI said this week that its next model, code-named Astra, has crossed the company’s own “Critical” cybersecurity threshold, the highest tier in its internal risk-classification system. TechCrunch reported on September 1, 2026 that internal testing showed Astra could find previously unknown security flaws and exploit them without a human walking it through each step. Fortune’s…
Aesto Health, a Birmingham, Alabama-based healthcare technology vendor, disclosed on September 1, 2026 that a security incident tied to its Amazon Web Services (AWS) infrastructure exposed personal and health data belonging to 9,540,683 patients, according to reporting from BleepingComputer, SecurityWeek, and HIPAA Journal. The disclosure makes Aesto Health’s breach the second-largest confirmed U.S. healthcare data…
A critical flaw in JFrog Artifactory, the software registry that sits at the center of build pipelines for thousands of enterprises, is now being actively exploited in the wild. Tracked as CVE-2026-82329 and rated 9.8 out of 10 on the CVSS scale, the bug lets an unauthenticated attacker with nothing more than network access mint…
Threat actors exploited commodity in ownCloud to gain initial access, resulting in stolen reactor databases, personnel records, and credential stores.
An autonomous AI agent swarm broke into 21 Taiwanese government systems, cracked 85 user accounts and pulled 2,500 personnel records over four days in July 2026, without a human operator directing the attack step by step. Taiwan’s Ministry of Digital Affairs confirmed the intrusion on August 13, 2026, and researchers at the Israeli AI security…
More than 100 technology, cybersecurity and financial companies warned this week that AI-enabled cyberattacks could turn far more widespread as increasingly capable models make sophisticated hacking cheaper and faster to run, according to The420.in. The warning lands as Israel, a country that treats its banks, hospitals, telecom networks, electricity grid and water supply as inseparable…
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used…
The ongoing social engineering threat, which dates back to late 2025, tricks victims into granting threat actors long-term access to their accounts. The post FBI raises alarm over deceptive phishing campaign targeting prominent people appeared first on CyberScoop.
