The Edge of the Cyber World See the latest
A Dutch national who allegedly went by the handle “Archduke” is now fighting extradition to the United States after a nine-country law enforcement sweep tore through the infrastructure of the KillSec ransomware-as-a-service operation. The suspect, identified by the U.S. Department of Justice as Fouad Eltibrizi, was arrested in the United Kingdom on September 30, 2026,…
A critical flaw in Fortinet’s FortiMail secure email gateway is now confirmed under active attack, and the window for patching it is shorter than almost any similar bug this year. CVE-2026-104286, rated 9.8 out of 10 on the CVSS scale, lets an unauthenticated attacker write arbitrary files to a vulnerable FortiMail appliance using nothing more…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding…
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek.
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.
Experts and policymakers want AI companies to face consequences for agentic hacks. There may not be a clear-cut answer under existing laws and regulations. The post The legal questions raised by agentic AI hacks appeared first on CyberScoop.
Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
Organizations don’t need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them.
One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.
UK Counter Terrorism Policing arrested a 27-year-old dual British-Iranian national in Westminster, London, on Thursday, October 1, 2026, becoming the sixth person detained in an escalating investigation into a suspected bomb plot near RAF Fairford, a Royal Air Force station in Gloucestershire used by the United States Air Force. The man was arrested on suspicion…
