[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Cisco Discloses Active Attacks on Secure Email Gateway Flaw
Cisco is warning users of its Secure Email Gateway of an actively exploited flaw that could allow hackers to run commands as root, giving them total control of the system. This critical vulnerability, scored 9.8, is being targeted by attackers who are sending crafted email attachments to take advantage of the weakness.
Ivanti Discloses Zero-Day Exploits in Connect Secure
Ivanti has sounded the alarm on zero-day exploits targeting its Connect Secure software, warning that a limited number of customers have already been affected. The company has released urgent updates to patch the vulnerabilities and is urging customers to act fast to avoid falling prey to these attacks.
CISA Warns of Actively Exploited Ivanti Connect Secure Vulnerability
Warning: a high-severity vulnerability in Ivanti Connect Secure is under active exploitation, putting your systems at risk of remote attacks - don't wait to patch! Federal agencies must apply fixes by October 16, 2026, to stay secure.
Ledger Halts Asia Sales After Supply-Chain Attack Compromises Wallets
Trezor is stepping up its game to protect users, implementing a stricter legal framework and tighter checks on device sourcing, storage, and handling. Ledger, meanwhile, is warning users to be vigilant after discovering that devices sold by a Southeast Asian reseller had been compromised, allowing thieves to steal cryptocurrency recovery phrases.
Cisco Disrupts Zero-Day Attacks on Secure Email Gateway
Cisco is taking swift action to stop zero-day attacks on its Secure Email Gateway, recently discovering a vulnerability that allowed hackers to write arbitrary files and execute commands with root privileges. This critical flaw, tracked as CVE-2026-76519, was triggered by a simple malicious email attachment, making swift patching a top priority.
US Disrupts North Korean IT Worker Fraud Scheme, Charges 14
The US Department of Justice has cracked down on a massive fraud scheme involving North Korean IT workers posing as remote employees, charging 14 people and seizing nearly 200 computers. This multi-year scam duped over 70 American companies, generating $3 million in revenue.
Hackers Exploit Refrigeration Systems in 700+ Retailers
Cyberattacks on retailers just got a whole lot chillier - literally, as hackers exploited refrigeration systems in over 700 stores, causing food spoilage, fires, and massive losses. By breaching outdated software, attackers remotely cranked up temperatures to as high as 122°F, leaving a trail of destruction in their wake.
Microsoft Resolves VPN Issues Tied to September Windows Updates
Microsoft has released two new cumulative updates, KB5127648 and KB5127646, to fix a frustrating VPN issue affecting Windows 11 users who installed September's updates, which could leave connections stuck in a "Connecting" state or fail to connect altogether. These updates should now keep your Always On VPN connections stable and secure.
Agentic Pentesting Exposes Coverage Gaps
Imagine having a powerful tool that can scan for vulnerabilities at incredible speed, but sometimes struggles to reach every corner of your system - that's what happened when agentic pentesting uncovered a major nginx-ui authentication bypass, missing 360 instances that were left without a clear verdict. By combining AI-driven dynamism with human insight, agentic pentesting offers a potent solution to bridge the gap between vulnerability discovery and exploitation.
Forescout Researchers Expose ROMULUS Malware Server Leveraging ClickFix
Forescout researchers have uncovered a cunning malware server, dubbed ROMULUS, that's linked to a notorious campaign called ClickFix, and what's alarming is that it can deliver multiple payloads. This discovery was made by Vedere Labs, part of Forescout Research, who identified six servers running the ROMULUS platform.
Law Enforcement Disrupts Phishing Network Behind 1 Billion Malicious Messages
A massive phishing network responsible for sending over 1 billion malicious messages to 75,000 organizations in 150 countries has been disrupted by law enforcement, bringing relief to countless individuals and businesses worldwide. This enormous operation had been targeting victims with sophisticated device-code phishing scams, with over 750 million messages aimed specifically at Microsoft customers.
Deepfakes Expose Verification Gaps in Corporate Security
Imagine receiving a call from your CFO on a Friday afternoon, urgently asking you to make a supplier payment before the weekend - only to discover it was a sophisticated deepfake designed to deceive you. With 62% of organizations already falling victim to deepfake attacks, it's clear that corporate security verification gaps are a pressing concern.
Curl Fixes Flaw That Exposes Clients to Code Execution
A subtle bug in curl's HTTP/2 upload sequence could let malicious servers corrupt memory on machines running the curl client and libcurl library, potentially leading to code execution - but thankfully, a fix was swiftly rolled out in curl 8.23.0 on October 14. The vulnerability, tracked as CVE-2026-92392, affects curl releases 8.12.0 through 8.22.0.
CISA Warns of Ivanti Flaw Exploited in Zero-Day Attacks
A high-severity security flaw in Ivanti Connect Secure, known as CVE-2026-104935, has been exploited in zero-day attacks since October 1st, allowing hackers to remotely execute malicious commands without authentication. CISA is urging security teams to patch immediately and hunt for signs of compromise to protect their networks.
CISA Warns of Active Ivanti Connect Secure Exploit Attempts
Warning signs are flashing: 105 attempted hacks have targeted Ivanti Connect Secure systems in a short span, exploiting a severe authentication-bypass bug that lets attackers run malicious commands remotely. This zero-day vulnerability, tracked as CVE-2026-104935, is under active attack, putting unpatched systems at risk.
AI Agent Exposes OTP Bypass Flaw in Major Insurer's Production Site
In a surprising test, an AI-driven pentesting agent uncovered a major security flaw, effortlessly bypassing a one-time passcode (OTP) on a leading insurer's production website used by millions. By manipulating just two values, the agent successfully redirected the OTP to an email inbox it controlled, allowing a seamless login.
[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Hirudo Trojan Exploits Patched Banking Apps to Evade Security Checks
Meet Hirudo, a sneaky Trojan that's exploiting patched banking apps to slip past security checks and wreak havoc on unsuspecting users. This malicious mastermind combines credential theft, device takeover, and even camera capture to pull off its dastardly heists.
Hirudo Malware Disrupts Banking Apps with Advanced Evasion Tactics
This sneaky malware outsmarts banking apps by hijacking their own defenses, essentially turning their security against them. By cleverly replacing legitimate apps with malicious versions, Hirudo malware intercepts sensitive info, putting victims' financial data at risk.
AI Agents Accelerate Chrome Exploit to $250,000 Payout in Six Days
In just six days, a researcher used AI agents to create a Chrome exploit chain that raked in a $250,000 payout - a stunning achievement that's a testament to the power of speed and innovation in cybersecurity. This lightning-fast feat was made possible by harnessing the power of AI, which racked up around $40,000 in compute charges.
Passkey Adoption Gains Momentum But Trails Behind
The shift away from passwords is gaining speed, but there's still work to be done - passkey adoption nearly doubled in the past year, but hasn't yet reached the finish line. Dashlane's latest report reveals 2.5 million passkey authentications per month and 57% of users storing at least one passkey.
Windows Updates Disrupt Remote Desktop Connections
Recent Windows updates are causing a headache for remote workers, with Remote Desktop connections failing due to a compatibility issue when Administrator protection is enabled. This frustrating error, marked as 0xC000000D, prevents non-administrator users from connecting to devices, leaving teams stuck.
Linux Flaw Exposes Kernel Memory to Local Users, Enables Root Escalation
A newly uncovered nine-year-old flaw in Linux's vhost subsystem, dubbed Vghost, allows local users to tap into kernel memory and gain root access with alarming ease. This vulnerability, tracked as CVE-2026-74580, poses a significant threat, enabling unprivileged users to read and write kernel addresses and potentially take control of a system.
OpenAI Engineer Charged with Planting Secret Recording Device
An OpenAI engineer allegedly planted a sneaky recording device in the company's executive conference room to capture sensitive chats about its top-secret super intelligence tech. The shocking discovery was made when staff stumbled upon the hidden gadget concealed in toilet paper.
Cyber-Attack Targets French Supermarket Refrigeration Controllers
A cyber-attack on French supermarkets' refrigeration controllers has caused food stock disruptions, with hackers altering freezer settings at an alarming rate - in one case, even changing temperatures from -22°C to 150°C. This critical breach has raised concerns about the preservation of food products and the security of essential systems.