[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongEmerging Threats
FBI Probes Massive ID Theft Service Selling 153M+ Drivers Licenses
Imagine a black market service that boasts access to over 153 million drivers' licenses, 10 million ID cards, and 3 million travel documents - and has been secretly collecting data for over a year. The notorious Nexus service on Exploit is making these staggering claims, sending shockwaves through the cybersecurity world.
Nutex Health Breach Exposes Patient Data to Ransomware Gang
Nutex Health revealed a devastating data breach on August 31, confirming that a ransomware gang had infiltrated its servers, compromising sensitive patient, employee, and business information. The attackers have even threatened to publicly expose the stolen data.
Russian Hacker Charged Over Excel Malware Campaign Targeting Freelancers
A massive malware campaign, involving around 255 fake accounts and 80,000 targeted users, has led to charges against a Russian national, Searzhudin Tamirlanovich Aktulaev, who has been extradited and charged by the U.S. Department of Justice. The campaign, which spread malware through infected Excel attachments, allegedly ran from June 2016 to November 2017, targeting freelancers and others.
GeoNetwork Flaw Exposes Government Geoportal Backends to Unauthenticated Code Execution
A shocking security flaw in GeoNetwork has been discovered, leaving government and agency geoportals vulnerable to unauthenticated code execution - and it's already been exploited in 121 internet-exposed deployments across 39 countries. The vulnerability allows attackers to upload malicious files, giving them free rein to wreak havoc on sensitive systems.
US Indicts Russian for Infecting 80,000 Freelancers with Malware
A massive phishing campaign infected 80,000 freelancers with malware, using 255 fake accounts to spread malicious Excel attachments with hidden macros that downloaded additional software onto victims' systems. The cleverly designed scam exploited a popular freelance employment platform's online messaging feature to spread its digital damage.
SonicWall Zero-Days Exploited in Wild, Firm Urges Immediate Patching
SonicWall is urging immediate patching for two zero-day vulnerabilities in its SMA1000 appliances, which are being actively exploited in the wild by hackers. The more critical flaw, CVE-2026-83548, has a severity rating of 10.0 and can be triggered without authentication, putting sensitive data at risk.
Authorities Disrupt Sality's P2P Network, Neutralize Malware Payloads
In a major win for national security, authorities have successfully dismantled the Sality malware's peer-to-peer network, crippling its ability to spread and cause harm. By cleverly turning the malware's own protocols against it, law enforcement and private partners isolated infected hosts and rendered the threat actor powerless.
Attackers Exploit Switchvox Flaw to Deploy Reverse Shells
A critical flaw in Sangoma Switchvox SMB Edition 8.3 can let attackers execute malicious code without credentials, giving them alarming control over your system. This unauthenticated SQL injection vulnerability, tracked as CVE-2026-9586, is a serious threat that demands immediate attention.
Global Authorities Disrupt Sality Botnet Infrastructure
In a major win for cybersecurity, global authorities have joined forces to dismantle the notorious Sality botnet infrastructure, seizing key domains in the US and Europe. This coordinated crackdown, involving the US Department of Justice and international partners, has disrupted the malware's grip on thousands of infected computers.
FulcrumSec Leaks 550GB of Manchester Airport Group Customer Data
A massive 550GB data leak at Manchester Airport Group has exposed the sensitive personal info of nearly 8.7 million customers, with hackers claiming to have posted almost all of the stolen data online. The breach is believed to contain a wide range of personal data, putting customers at risk of identity theft and other cyber threats.
CrowdStrike and Law Enforcement Disrupt 23-Year-Old Sality Botnet
In a major win for cybersecurity, CrowdStrike and international law enforcement agencies joined forces to dismantle the notorious Sality botnet, crippling its ability to communicate and operate by corrupting its core network. By targeting the botnet's peer list, they effectively isolated infected machines and brought the 23-year-old threat to a grinding halt.
FBI Warns of Sophisticated Phishing Campaign Targeting High-Profile Individuals
Beware of a sneaky phishing scam that's targeting high-profile individuals, using a clever tactic to gain long-term access to their cloud accounts without needing their passwords. This sophisticated attack convinces victims to grant a malicious app permission to their accounts, allowing hackers to stay logged in for good.
METR Exposes $600K API Credit Theft After Weeks of Undetected Breach
A shocking $600,000 theft of API credits went undetected for weeks, leaving a nonprofit reeling - here's how a brief security lapse led to the massive breach. Attackers exploited a vulnerable API key, draining credits from METR's public models account in just a few short weeks.
Attackers Exploit Artifactory Flaw in AI-Driven Campaigns
Cyber attackers are leveraging a newly exploited Artifactory flaw in highly sophisticated, AI-driven campaigns - but are these threats coming from automated bots or human culprits? The line between human and machine is blurring in the world of cybercrime.
Hackers Exploit Faronics Tool to Install ScreenConnect on Compromised Endpoints
Hackers are using clever phishing lures disguised as invoices and business files to trick victims into installing malicious software, with over 457 endpoints compromised in just a month. They exploited a legitimate endpoint-management tool to gain remote control and install additional remote-access software.
Aesto Health Data Breach Exposes 9.5 Million Patients
Aesto Health revealed a massive data breach on June 24, affecting a staggering 9.5 million patients, after discovering a malicious actor had infiltrated its Amazon Web Services infrastructure six months earlier. The breach, which occurred between December 2-18, 2025, exposed sensitive information, sparking a lengthy internal investigation.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Breeze Comet Exploits Brazilian Payment Systems in Hundreds of Fraudulent Transactions
Meet Breeze Comet, a financially motivated threat actor that's been wreaking havoc on Brazilian payment systems with hundreds of fraudulent transactions, exploiting customized malware and compromised websites to siphon off tens of thousands of dollars. Their tactics are evolving, and Latin American countries should beware of potential expansion.
Attackers Exploit JFrog Artifactory Flaw to Mint Admin Tokens
A critical flaw in JFrog Artifactory, known as CVE-2026-82329, allows attackers to easily gain admin access without needing authentication or user interaction, posing a huge risk to affected instances. This near-maximum-score vulnerability has already been patched in Artifactory version 7.161.20.
Langflow vulnerability exploited to harvest OpenAI, AWS keys
Attackers are actively exploiting a critical vulnerability in Langflow to harvest sensitive keys, including OpenAI and AWS credentials, by querying environment variables and reading secret files. This severe flaw, known as CVE-2026-0768, allows hackers to execute arbitrary Python code with root privileges, putting systems at risk.
AI Cyberattacks Threaten Global Financial System Stability
The Financial Stability Board warns that AI-powered cyberattacks could spark a chain reaction of chaos in global markets, exploiting vulnerabilities in sovereign debt, private credit, and asset valuations. This threat is more than just a tech issue - it's a potentially disastrous blow to market confidence.
McKesson Breach Exposes Third-Party Risks in Healthcare
A single vulnerable third-party application can spark a national patient data crisis, as seen in the recent McKesson breach, where a third-party integration led to a massive data exfiltration claim of 284 million records.
Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Seeds
Researchers uncovered 13 malicious packages on Packagist that inject JavaScript into popular Vietnamese streaming sites, unleashing a two-pronged attack that includes mobile ad-fraud and spyware installation on unpatched iPhones. This sneaky malware can steal crypto seeds and wreak havoc on unsuspecting users.
Threat Actors Exploit API Key, Drain $600,000 in AI Credits
In a shocking security breach, threat actors made off with a whopping $600,000 in AI credits after exploiting a stolen API key from AI safety research group METR over just three weeks. The incident began with a researcher inadvertently leaving a public EC2 instance exposed, despite Google authentication, due to a fail-open flaw and a "vibe-coded" app storing a sensitive API key.
Cybersecurity Leaders Warn of AI Trust Gap
More than one in five organizations have fallen victim to AI-powered attacks, with 22% reporting a security incident in the past year where hackers used artificial intelligence to breach critical business platforms. This alarming trend highlights the urgent need for cybersecurity leaders to address the growing AI trust gap.