The Edge of the Cyber World See the latest
Remote Desktop Protocol still sits on the front line of almost every ransomware intrusion chain, and 2026 has done nothing to change that. Attackers scan the internet in minutes for exposed port 3389, throw credential lists at whatever answers, and pivot from there. If your organization runs Windows Server or lets staff RDP into workstations…
Shodan turns 17 this year, and it still does one thing better than almost any other tool in a security team’s kit: it tells you what the internet already knows about your infrastructure before an attacker finds out first. Type a query into Shodan and you get a live inventory of exposed routers, industrial controllers,…
OpenAI pushed GPT-6 Astra further into the enterprise world on September 10, 2026, unveiling ChatGPT for Financial Services, a tailored version of ChatGPT Work that pairs live market and filing data with Astra’s reasoning engine for research notes, financial models, and client-ready reports. The move, detailed in an OpenAI product blog post, marks the first…
IDScan.net has stopped hedging. Nine days after KrebsOnSecurity first tied a dark-web marketplace called Nexus to a Louisiana-based identity-verification vendor, the company posted a notice confirming that hackers stole driver’s licenses from its cloud environment, including full names, driver’s license numbers, and identity numbers from other government-issued documents such as passports. TechCrunch reported the confirmation…
Threat actors are leveraging Microsoft’s Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to disclose information, brute-force hashes, or run arbitrary code in a browser session. The following versions of AVEVA Pipeline Integrity Monitor are affected: AVEVA Pipeline Integrity Monitor <=2025_SP1_P1_build_7.1.9580.8513 (CVE-2026-81821, CVE-2026-81822, CVE-2026-81823, CVE-2026-81824) CVSS Vendor Equipment Vulnerabilities v3 8.4 AVEVA AVEVA Pipeline Integrity Monitor…
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition. The following versions of Orthanc DICOM Server are affected: Orthanc DICOM…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition. The following versions of NextGen Healthcare Mirth Connect are affected: Mirth Connect <=v4.7.1 (CVE-2026-82583, CVE-2026-78224, CVE-2026-82578) CVSS Vendor Equipment Vulnerabilities v3 8.3 NextGen Healthcare NextGen Healthcare Mirth Connect Improper Neutralization of Special Elements used in…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition. The following versions of ST Engineering iDirect iQ-Series Terminals (Update A) are affected: Evolution iQ‑Series terminals <=4.5.2.1 (CVE-2026-38059, CVE-2026-38057, CVE-2026-38056, CVE-2026-38058) 3315‑Series terminals <=4.5.2.1 (CVE-2026-38059, CVE-2026-38057, CVE-2026-38056, CVE-2026-38058) 9‑Series terminals <=4.5.2.1…
