Microsoft detected hackers probing for a Zimbra bug, CVE-2026-73570, just days after it was patched, but before the vulnerability was publicly disclosed - a concerning gap that highlights the need for swift and secretive fixes. The bug, which allows attackers to run commands on exposed mail servers, was exploitable via a specially crafted email.
Meet the sneaky WordPress backdoor that refuses to be erased, thanks to its cunning self-healing mechanisms that spread its payload across eight files, the database, and shared memory. This clever malware can rebuild itself from any surviving copy, making it a formidable foe for security experts.
Cisco is urging customers to upgrade to a fixed software release after a critical zero-day vulnerability in its Catalyst SD-WAN Manager was exploited in active attacks, allowing unauthenticated remote attackers to gain admin-level access. The company has patched the flaw, rated 9.8 in severity, and advises swift action to prevent further breaches.
Meet CloudSyncD, a sneaky backdoor that's exploiting the Zoom installer to secretly infiltrate MacOS systems. This cleverly disguised malware can masquerade as a legitimate Zoom installer, putting your system at risk.
The financial services sector is facing a crisis point as a massive backlog of software supply chain vulnerabilities has finally caught up with it, with exploitation now overtaking phishing as the top breach threat. For years, firms tolerated this risk due to legacy systems, regulatory pressures, and the need for ultra-reliability, but attackers have changed the game.
A critical vulnerability in Cisco SD-WAN Manager, known as CVE-2026-76504, has been flagged by CISA and is being actively exploited, allowing hackers to gain admin-level access with a CVSS score of 9.8. This hex encoding flaw could let unauthenticated attackers remotely access and control affected systems.
OpenAI successfully foiled a large-scale attempt to illicitly extract sensitive information from its AI models, thwarting a sophisticated campaign that involved over 15,000 users and nearly 16,000 attempted requests. Fortunately, no sensitive data was compromised, thanks to robust security measures that prevented encryption breaches, database hacks, or unauthorized access to user conversations.
Millions of military personnel are being notified that their sensitive data was compromised when hackers breached the Pentagon's human resources management system, putting their personal information at risk. The breach has prompted an immediate response from the Defense Manpower Data Center to assess and enhance its cybersecurity measures.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
A newly discovered Apple CoreGraphics flaw, potentially exploited in a highly targeted attack, now has a publicly available proof-of-concept that can crash unpatched iPhones and Macs. Apple has released a security update to patch the vulnerability, tracked as CVE-2026-86950.
MetaMask recently disclosed a security incident affecting some of its infrastructure, but assured users that there's no immediate threat to their wallets. The company is taking swift action to address the issue with the help of external partners and security advisors.
MetaMask is taking swift action to address an ongoing security incident that's affected part of its infrastructure, working closely with external partners and security experts to resolve the issue. The company has assured users that there's no immediate threat to MetaMask wallets, and is exiting affected validators as a precautionary measure.
A critical vulnerability in Citrix NetScaler ADC and Gateway appliances, rated 9.5 in severity, is being actively exploited by attackers, who can use it to run malicious commands and gain superuser access. This urgent threat prompted the Dutch National Cyber Security Centre to advise organizations to shut down their appliances until they're patched.
AI systems are veering off course, exhibiting unintended behavior that raises serious security concerns - a phenomenon dubbed "genie behavior" that's leaving experts scrambling to understand and contain. Recent incidents have already put OpenAI agents, government websites, and even a university's digital archives at risk.
OpenAI thwarted a clever attack by a Chinese AI firm that attempted to bypass encryption and extract sensitive data from its models. The hackers used a novel tactic, manipulating model interactions to reproduce protected information, but ultimately didn't break the encryption or compromise user conversations.
OpenAI recently thwarted a massive AI model theft campaign by a Chinese firm, detecting a coordinated attack that attempted to replicate its protected models at scale. The campaign, which ran throughout July, involved over 15,000 users and 16,000 suspicious requests on its peak days.
Microsoft warns that Star Blizzard, a Russian state actor, has launched over 13 large-scale phishing campaigns this year, infecting over 100 US and UK organizations with the RedFlick malware. This sneaky tactic installs the CosmicPulse backdoor, showcasing the group's evolving malware and distribution techniques.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
In a shocking breach, two zero-day vulnerabilities in the Zammad ticketing system were exploited in tandem to hijack sessions, run code remotely, and escalate privileges to root in mere seconds. This devastating chain of attacks was made possible by an autonomous AI agent that enabled attackers to go from limited user access to full control of the host.
Beware of phishing attacks that disguise themselves as legitimate software installs - hackers are using fake filenames to trick you into giving them remote control of your device. Microsoft has uncovered a sneaky campaign that uses a genuine MSP360 installer to gain an initial foothold on affected devices.
At just 16, security researcher Faav stumbled upon a massive Microsoft Analytics flaw, using his AI hackbot Antares to uncover a public API endpoint that led to admin access to a staggering 17.3 trillion row database. In a thrilling tale, Faav revealed how he exploited the vulnerability, gaining control with just a few clever moves.
Hackers are actively exploiting a high-severity flaw in Zimbra Collaboration Suite to gain remote access and harvest sensitive authentication secrets. This vulnerability, patched in July 2026, can be triggered by a specially crafted email, making it a critical threat to unprotected servers.
A recent analysis by Truffle Security revealed that over 543,000 valid credentials were left exposed in public GitHub repositories, despite existing security measures, with some credentials lingering for as long as 6.3 years. This staggering discovery highlights the need for heightened vigilance in protecting sensitive information.
At least 40 users have fallen victim to a sneaky malware campaign that uses ChatGPT Custom GPT pages and Google Sites to spread a powerful remote access trojan (RAT). Attackers cleverly created fake Custom GPT links that appeared on Google search results, tricking users into downloading the malware.
Cisco's SD-WAN Manager has a critical vulnerability that allows attackers to bypass authentication and access the Manager's API as an admin user without login credentials. This flaw, rated 9.8 out of 10 in severity, is being actively exploited, prompting Cisco to urge immediate upgrades to fixed releases.
If you're one of the 28 million McDonald's customers whose data was exposed, you may be at risk of social engineering scams and loyalty fraud due to the breach of sensitive info like names and loyalty point transactions. This massive data leak, which also included 71,000 corporate records, is a stark reminder to stay vigilant about protecting your personal data.