Commvault security advisory (AV26-899)
A vulnerability has been discovered in SAP Extended Passport (EPP) Processing that could allow for remote code execution. SAP Extended Passport (EPP) Processing is a core system data structure and...
Fortinet security advisory (AV26-898)
Threat actors are exploiting GTA6 hype with fake leaked downloads spread via SEO poisoning, packed with RATs, infostealers, and wiper ransomware. Here’s what Huntress found.
cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their...
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When...
The remarks, to both CyberScoop and at the Billington CyberSecurity Summit, dovetail with the release of a new bureau cyber strategy. The post FBI officials say AI is bolstering adversaries,...
See how a browser-in-the-browser phishing attack led to rogue ScreenConnect persistence and evasion tactics Huntress caught in the act.
Artificial intelligence chatbots are becoming a source for voters to ask questions about upcoming elections, but a new study determined nearly a third of AI-generated replies could be inaccurate...
Volker Türk has called for urgent global safeguards, independent checks and agreed limits on advanced artificial intelligence. The United Nations human rights chief has warned that advanced...
In our previous blog, we explored a series of disclosures from the leak persona Nightmare-Eclipse that focused heavily on Microsoft's ecosystem, including Windows Defender, Cloud Files, and core...
The International Burke Institute (IBI) presents itself as an Israel-based expert community. Its website features research papers, a proprietary sovereignty index, and a roster of affiliates that...
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a...
SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the...
Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what I wrote about AIs doing mathematics: It’s good at things that involve lots of searching and testing.
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively...
Iranian hackers who recently took credit for an array of attacks on U.S. water systems claimed that they were behind an AT&T outage across major Texas cities on Monday and vowed to “intensify”...
An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks. The post Untracked Nightmares: The Threats Hiding...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog,...
Open-source registries for AI agents are only effective when they include a rigorous, transparent security review process for community submissions. That’s why for its new CyberAgents Exchange...
AI scams are now hyper-realistic. But there’s one simple way to see through them.
In other news: US accuses Chinese AI companies of industrial-scale distillation attacks; cyberattack hits Luxembourg doctors' clinics; Liquid Network attacker returns most funds, keeps $50m bounty.
Adobe also brought goodies to the patch party and they deserve immediate attention
GenAI security concerns jump 18 points to 78% as CISOs take on growing AI responsibilities without proportional resources SUNNYVALE, Calif. – September 9, 2026 – Proofpoint, Inc., a global
Recorded Future just launched Digital Risk Protection, a unified solution covering five external threat surfaces, so security teams can detect, triage, and take down brand and identity threats...
Researchers disclosed the cross-account trick the same day rogue agents exploited another zero-day for admin access
While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to focus on their specific areas of risk and exposure. The post...
The new record total for Patch Tuesday is 973 vulnerabilities.
Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical."
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is...