-
A critical MLflow vulnerability is now under active exploitation, according to the US Cybersecurity and Infrastructure Security Agency. The flaw can let unauthenticated attackers access internal services and cloud metadata on vulnerable MLflow servers. Tracked as CVE-2026-64849, the issue affects MLflow’s outbound webhook delivery system. Attackers can exploit it through a DNS rebinding server-side request…
-
The Manic Android malware can steal sensitive data from compromised phones and send it through nearby infected devices when it cannot reach its command-and-control server directly. The threat combines banking fraud, spyware features and remote-control tools in one Android package. Researchers say Manic has operated since at least February. It targets users across several European…
-
A critical Zimbra RCE flaw is now being actively exploited, prompting administrators to patch vulnerable email servers and review their systems for signs of compromise. The issue affects Zimbra Collaboration Suite installations that use SNMP notifications. Tracked as CVE-2026-73570, the vulnerability allows an unauthenticated attacker to execute operating-system commands as the Zimbra user. Attackers can…
-
Microsoft is investigating Windows 11 gaming issues reported after the August 2026 cumulative updates. The company says a limited number of games may fail to run correctly on Windows 11 versions 24H2 and 25H2. Reported symptoms include games freezing, suddenly closing, showing an access-violation error or restarting the device without warning. Microsoft has not confirmed…
-
A major ChatGPT outage prevented users from accessing chats, signing in and creating new accounts. The disruption began at about 8 PM ET on August 19 and affected people in several regions, including the United States and Europe. Users reported that conversations would not load and that the ChatGPT sidebar remained stuck on loading animations.…
-
A suspected ransomware affiliate is posing as a recovery service called Ransom Busters and contacting victims before their attacks become public, researchers warn. The group claims it can provide decryption keys and delete stolen data from ransomware servers. It then asks victims to pay a separate fee for its services. Researchers assess that Ransom Busters…
-
The Sakura Internet hack may have affected as many as 1,360,563 customer accounts after attackers accessed a sales management system that stored contract and membership information. The Japanese cloud and data-centre provider said the figure remains preliminary. Its investigation is still underway, and the final number of affected accounts has not yet been confirmed. Sakura…
-
The CareCloud data breach has affected more than 3.7 million people, according to a filing with the US Department of Health and Human Services. CareCloud provides electronic health records, medical billing, practice-management and revenue-cycle services to healthcare organisations. The company first disclosed the security incident in March after an attacker accessed part of its CareCloud…
-
A large-scale Dahua camera campaign compromised more than 14,500 IP cameras in just 35 days, researchers have found. The operation, named CameraSwarm, ran between June 17 and July 22. It relied on brute-force attacks, known vulnerabilities and a cloud-relay technique that could reach cameras behind network address translation, or NAT. Researchers uncovered the campaign after…
-
US cybersecurity agencies have warned that ongoing Siemens S7 PLC attacks are targeting critical infrastructure organisations with AI-generated exploitation scripts. The joint alert comes from the NSA, CISA, FBI, Department of Energy and Environmental Protection Agency. It warns that attackers are actively seeking exposed Siemens S7 Series programmable logic controllers, or PLCs, across the United…