Category: Cyber Security
-
The FakeGit malware campaign has resumed operations, using 17,610 malicious GitHub repositories to distribute SmartLoader. The latest wave uses the loader to deliver StealC, malware designed to steal information. Researchers at software supply-chain security firm Apiiro traced the renewed activity to October 4. Although the operation relies mainly on disposable accounts, they also identified at…
-
Five critical Cisco Nexus flaws could let attackers execute code with root privileges on affected data center switches. Cisco has released security updates to address the vulnerabilities in its NX-OS operating system. Attackers could also crash processes and trigger device reloads, disrupting network services even when attempts to execute code fail. However, exposure depends on…
-
Three more Samsung Galaxy S26 hacks featured on the second day of Pwn2Own Ireland 2026. Across the day’s competition, researchers earned $232,500 after exploiting 45 unique zero-day vulnerabilities in multiple products. The successful phone demonstrations came from KAIST Hacking Lab’s Kyeongmin Kim, PetoWorks, and a team comprising Dimitrios Valsamaras, Ken Gannon and CENSUS Labs’ Tenia…
-
The FBI has warned that FortiBleed attacks continue to target internet-exposed Fortinet FortiGate firewalls and SSL VPN gateways. In some incidents, attackers take control of administrator accounts and prevent legitimate users from managing their devices. The campaign relies on stolen or compromised credentials to gain access. Meanwhile, the FBI says the attack chain has provided…
-
Attackers hijacked several Google domains and obtained unauthorized HTTPS certificates after compromising third-party domain operators. The Google domain hijacking incidents affected country-code domains for Ghana, Sierra Leone and American Samoa. Other organizations also suffered domain hijacks within the .GH, .SL and .AS namespaces. However, Google said the attacks did not compromise its own systems. The…
-
Microsoft will begin blocking Outlook MSIX attachments by default in November 2026, introducing new restrictions for Windows installation packages. The change affects Outlook on the web and the new Outlook for Windows for Exchange Online users. The rollout should begin in early November and reach general availability by the middle of the month. Microsoft expects…
-
A cryptomining campaign has compromised more than 3,400 servers, exploiting exposed AI services and other internet-facing tools. PoeLLM malware uses infected machines to mine cryptocurrency, scan for additional targets and launch further attacks. Researchers at Lumen’s Black Lotus Labs have tracked the operation since at least April. At its busiest, the network had as many…
-
Attackers have begun targeting a critical vulnerability in self-hosted Atlassian software following the release of public proof-of-concept code. The Atlassian file access flaw, tracked as CVE-2026-21589, affects eight product families, including Jira, Confluence and Bitbucket. Security company Previdian reported exploitation attempts on its honeypot network within two hours of researchers publishing technical details. However, those…
-
SonicWall has issued hotfixes for a maximum-severity vulnerability affecting its SMA1000 secure remote access appliances. The SonicWall SMA1000 flaw could allow attackers without login credentials to make vulnerable gateways perform unauthorized operations. The company urged customers to install the updates promptly. However, it said there was no evidence of active exploitation when it announced the…
-
Attackers are exploiting a Ninja Forms vulnerability and a separate flaw in WPC Product Bundles for WooCommerce to compromise WordPress websites. The campaign uses malicious JavaScript to install backdoors and create unauthorized administrator accounts, including one hidden from the dashboard. Researchers at WordPress security company Patchstack detected attacks against WPC Product Bundles on October 4.…