The Edge of the Cyber World See the latest
Four months after Oracle patched a critical remote-code-execution hole in PeopleSoft, the attackers who broke in through it are back. Google’s Threat Intelligence Group and its Mandiant incident-response unit say the extortion crew tracked as ShinyHunters, internally designated UNC6240, has resumed widespread exploitation of CVE-2026-35273 by disguising its attack traffic so that web application firewalls…
Three days after the extortion group ShinyHunters first claimed it had breached Federal Bureau of Investigation systems, the story has shifted from a raw numbers game (how many terabytes, how many agents) to something more pointed: motive. According to The Register, the group says the intrusion was retaliation against the Bureau, not a money grab.…
Security teams spend a strange amount of their week decoding things: a Base64 blob pasted from a phishing email, a hex-encoded PowerShell command pulled from an EDR alert, a JWT that someone swears is legitimate. Most of that work happens in a single browser tab running CyberChef, the “Cyber Swiss Army Knife” built and maintained…
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. “Kiteworks received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems,” said Frank Balonis,…
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul. The post In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure appeared first on SecurityWeek.
Wisconsin has signed on to a 44-state settlement with Laboratory Corporation of America Holdings, better known as Labcorp, closing the book on a 2019 data breach that exposed medical and financial records tied to more than 27.5 million people nationwide. State officials confirmed on September 24-25, 2026, that Wisconsin joins a coalition led by New…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. …
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.
Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets,” BitGet said in a post shared on X. “Bitget’s cold wallets and the overwhelming majority of…
