-
An OpenAI agent breach gave unauthorized access to an Australian government Medicare statistics portal on June 18, 2026. Australian officials say an agent accessed public and non-public files while researching medicine spending. A separate report describes agents probing other public data providers for security flaws. Australian Government Confirms Portal Breach Prime Minister Anthony Albanese said…
-
RemControl Android malware targets banking users through fake downloads of the TVTap IPTV app. Researchers found campaigns aimed at people in Italy, France, Spain, Poland, Portugal, Canada and parts of the Middle East. Fake TVTap Pages Lead to Malicious Downloads According to Group-IB, the attackers’ infrastructure has operated since at least May 2026. Researchers first…
-
A ClickFix attack is appearing on third-party.com, a domain that many developer guides use as a placeholder. The site shows Windows users a fake security check and tries to persuade them to run a PowerShell command. Fake Verification Page Targets Windows Users Security company Manifold found the page while reviewing public AI skills and developer…
-
RemControl Android malware is targeting banking users through fake download pages for the TVTap IPTV app. Researchers at Group-IB say the campaign reaches users in parts of Europe, Canada and the Middle East. Fake App Pages Deliver the Malware The campaign’s infrastructure has operated since at least May 2026. Group-IB first observed malware samples in…
-
Check Point has confirmed active attacks against a Check Point VPN flaw that can allow remote code execution before authentication. The company also warns that attackers are exploiting a separate flaw in its Management web service. Attacks Against VPN Gateways Began in September The VPN vulnerability, CVE-2026-85102, affects how Check Point Security Gateway handles certificates.…
-
Attackers have moved from probing a WordPress RCE flaw to attempting to write malicious files onto vulnerable sites. Some observed payloads could run shell commands if someone accesses the files, according to security firm Patchstack. Attacks Began Hours After the Patch The vulnerability, CVE-2026-87902, received a critical severity score of 9.2 out of 10. WordPress…
-
A threat actor is using AI agents to attack online retailers at scale, according to cybersecurity company Gambit. Researchers say the campaign has stolen more than 600,000 valid payment card records and placed skimmers on at least 119 websites. Attacker Uses Three AI Tools Gambit traced the campaign to at least July 2026. Between September…
-
Attackers are increasingly targeting network management systems that control enterprise infrastructure, according to Eclypsium’s September InfraTrust Pulse report. Several critical flaws attracted attacks before or soon after vendors disclosed them. Report Tracks 1,699 Vulnerabilities Between August 25 and September 17, InfraTrust tracked 158 security advisories from 17 vendors. Together, they covered 1,699 vulnerabilities. The report…
-
Arista Networks has warned that attackers are actively exploiting a VeloCloud Orchestrator zero-day affecting on-premises deployments. The company has patched certain hosted versions and plans to release fixes for additional versions. Flaw Exposes Privileged Host Functions The maximum-severity vulnerability, CVE-2026-93952, stems from improper input validation. It affects deployments that use certificate-based authentication between VeloCloud Edge…
-
A Ryuk ransomware member has received a 24-month prison sentence for his role in attacks on US organizations. Karen Serobovich Vardanyan will also serve three years of supervised release. Vardanyan Helped Breach US Networks Vardanyan, a 35-year-old Armenian national, specialized in gaining access to corporate networks. Online, he used the names “Maneeken” and “Karl Lagerfeld.”…