AI-Powered Cyber Attacks: A Growing Threat to Security
GTIG analysis shows automated AI systems are accelerating vulnerability discovery and secret theft, increasing attacker scale and speed.
Wednesday, September 9
WeChat Zero-Click Vulnerability: A Silent Threat Neutralized
Researchers built a WeChat zero-click worm that takes over accounts via incoming calls without user interaction, spreading across phones.
Critical FreeIPA Security Flaws Allow Unauthorized Access to Administrator Credentials
A FreeIPA flaw chain allows anonymous clients to create Kerberos identities and be added to administrators group via 389-ds bug.
Florida DMV Database Breach Exposes Sensitive Driver Records
ShinyHunters claims to have breached Florida's DAVID DMV database, stealing over 200,000 driver records for extortion.
Cyberattack Disrupts Bavarian Utility's IT Systems
A Bavarian municipal utility's internal IT systems were encrypted, operations unaffected but recovery ongoing after cyberattack.
Mathspace Data Breach Compromises Over One Million Individuals
Hackers stole student, teacher, staff and guardian records from Mathspace's self-hosted Metabase instance, exposing over 1 million people.
MikroTik Urges Immediate Router Updates to Block Exploitation
MikroTik patched 'MikroTrick' critical flaws that bypass authentication, overwrite configs, and allow device takeover.
AI-Driven Credential Theft: A New Threat Landscape
Threat actors adopt multi-agent AI frameworks to automate credential harvesting, scaling theft and account takeover operations quickly.
Urgent Patch Released for Critical Vulnerability in N-central Platform
N-able released multiple hotfixes for N-central RMM to address a critical, actively exploited zero-day; verify hotfix application and unknown accounts.
Urgent Alert: Critical Chromium V8 Vulnerability Actively Exploited
CISA warns CVE-2026-85046 is actively exploited in the wild against Chromium-based browsers; update browsers and apply mitigations.
Adobe Releases Urgent Patch for Magento Zero-Day Vulnerability
Adobe issued an emergency patch for the Magento zero-day 'StyleSmuggler' used to backdoor servers; immediate updates required for e-commerce.
Monday, September 7
Critical Vulnerability in Elementor Pro Plugin Exploited by Hackers
PremiumElementor Pro CVE-2026-32475 arbitrary file upload is exploited to hack WordPress sites (CVSS 9.8).
Phishing Tactics Evolve with Invisible Unicode Characters
PremiumAttackers use invisible Unicode characters (ASCII smuggling) in phishing emails to evade email security filters.
REVSTEALER Modules Disrupt Windows Security to Exploit Cryptocurrency Mining
PremiumREVSTEALER-linked modules disable Windows Update and Defender then run a cryptocurrency miner, persisting post-stealer.
CrowdStrike FalconFlank Zero-Day Exploit Threatens Windows Systems
PremiumFalconFlank zero-day exploit targets CrowdStrike Falcon, enabling SYSTEM privilege escalation on updated Windows hosts.
AI-Driven Attack Breaches Enterprise Network with Unprecedented Speed
PremiumHuman operator using frontier AI models breached an enterprise network and stole root credentials in under 10 hours.
MikroTik Routers Vulnerable to Unauthenticated SSH Exploits
PremiumAttackers exploit internet-exposed MikroTik SSH to gain unauthenticated full administrative control of routers.
CrowdStrike Zero-Day Exploit Released by Nightmare Eclipse
PremiumExtortion group Nightmare Eclipse alleges CrowdStrike zero-day release and leaks Manchester Airports Group data.
Russia Mandates Drone Defenses for Data Centers Amid Security Concerns
PremiumRiskyBiz reports Russia orders data centers to deploy drone defenses amid physical attack concerns and other incidents.
Critical Security Flaw in ASUS Control Center Demands Immediate Attention
PremiumASUS Control Center Enterprise CVE-2026-75754 allows unauthenticated remote attackers full administrative control (CVSS 10.0).
Get these articles delivered to your inbox.
Subscribe free