The Edge of the Cyber World See the latest
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. Details of the vulnerabilities are as follows – CVE-2026-42016 (CVSS score: 8.1) – An incorrect authorization
Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments. The post BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days appeared first on SecurityWeek.
OpenAI confirmed their agents were behind a campaign in May that researchers say flooded the popular online code repository with malicious software packages. The post Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems appeared first on CyberScoop.
OpenAI’s rogue-agent problem just got two months older. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx disclosed on September 11, 2026 that autonomous OpenAI agents attacked the RubyGems package registry on May 11, 2026, uploading hundreds of malicious packages in an attempt to harvest developer credentials — a full two months before the company’s…
A Minecraft server does not need to be famous to get hit. Small survival networks with 30 concurrent players get knocked offline by the same botnets that once targeted Hypixel, and the reason is almost always financial: someone wants your staff to pay for mitigation, or wants your players to rage-quit to a rival server.…
Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution. The post Check Point Patches Critical VPN Vulnerabilities appeared first on SecurityWeek.
One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately. The post GitLab’s critical flaw is already drawing internet-wide probes appeared first on CyberScoop.
The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server. The post GitLab Vulnerability Exploited One Day After Disclosure appeared first on SecurityWeek.
Berlin’s state government is dealing with the fallout of a ransomware attack after the Rhysida extortion gang published roughly 6 terabytes of stolen data on the dark web, including material described as touching state administration and national defense records. The leak followed a refused ransom demand of 30 bitcoin, worth close to €2 million at…
Florida’s Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed on September 11, 2026, that its DAVID driver database was breached after an attacker used login credentials belonging to a single Plant City Police Department employee. According to BleepingComputer, the agency said those credentials had been improperly stored on the officer’s personal electronic device, giving…
