Ubiquiti Addresses Critical Vulnerabilities in UniFi Products
PremiumUbiquiti patched 22 vulnerabilities in UniFi products, including three rated 10.0, requiring urgent firmware updates to prevent RCE.
Friday, August 28
ATF Confirms System Breach Following Qilin Ransomware Attack
PremiumATF confirms a system compromise linked to Qilin ransomware claims affecting investigation-related data access.
CISA Highlights Critical Vulnerabilities in Key Software Products
PremiumCISA added six actively exploited vulnerabilities to its KEV catalog affecting Microsoft, Linux, Red Hat and Citrix products.
US Cripples Chinese Hacking Network Targeting Military and Infrastructure
PremiumU.S. agencies disrupted a China-linked hacking platform (QTFY) used against military and critical infrastructure, seizing infrastructure domains.
Ransomware Continues to Challenge Educational Institutions
PremiumReport finds ransomware remains a major threat to education, disrupting operations, data and remote learning access across institutions.
Avada WordPress Theme Vulnerability Exposes Sites to Remote Attacks
PremiumCritical Avada WordPress theme vulnerability enables unauthenticated zero-click PHP remote code execution on affected sites.
GPUThor Attack Exposes Vulnerabilities in NVIDIA RTX A6000 GPUs
PremiumGPUThor Rowhammer technique bypasses NVIDIA ECC on RTX A6000 GPUs to escalate privileges and gain host root access.
Critical Microsoft SQL Server Vulnerability Demands Immediate Attention
PremiumCISA added a Microsoft SQL Server RCE (CVE-2019-1068) to KEV after observed exploitation allowing code execution under SQL Server service.
Cybersecurity Breach Disrupts Boston Scientific's Global Operations
PremiumBoston Scientific reports global operational disruption and shipment delays after a cyber incident impacting IT systems.
Australian Authorities Arrest TeamPCP Hackers Linked to Supply Chain Attacks
PremiumAustralian authorities arrested two suspects tied to TeamPCP supply-chain attacks that tampered with open-source developer tools.
PaperCut NG/MF Vulnerability Exploited in Active Zero-Day Attacks
PremiumPaperCut NG/MF zero-day is actively exploited across all versions; vendor issued emergency patches and confirmed customer incidents.
Federal Agencies Face Urgent Deadline to Patch Citrix NetScaler Vulnerability
PremiumCISA mandates immediate patching of Citrix NetScaler (CVE-2026-8452) after active exploitation; federal agencies have an urgent deadline.
Wednesday, August 26
Norwegian Government Services Disrupted by Major DDoS Attack
Massive DDoS disrupted Norway's government digital services, taking multiple public-facing systems offline.
US and UK Respond to Iranian Cyber Threats with Sanctions and Warnings
US sanctions Iranian cyber actors while the UK discloses a cyber intrusion that disrupted a small power plant.
AI-Driven ToxNetV2 Botnet Targets Linux Systems with Enhanced Attack Strategies
ToxNetV2 Linux botnet uses NVIDIA AI to propose shell and SSH attack commands, accelerating operator decision-making.
Cyberattack Causes UK Power Plant Outage and Car Systems Infection
SANS roundup: UK power plant outage, car proxy-malware botnet, and N-able Passportal/Keycloak vulnerability fixes.
Iranian Cyberattack Highlights Vulnerabilities in UK Critical Infrastructure
Iran-linked cyberattack on a UK power plant underscores vulnerabilities in critical national infrastructure and small energy assets.
WordPress Sites Under Siege from MiniOrange Plugin Vulnerabilities
Authentication bypasses CVE-2026-61979 and CVE-2026-15981 in miniOrange SAML 2.0 plugin are being exploited to forge admin logins.
New Malware Targets Car Head Units, Expands Notorious Botnet
Researchers link novel car head unit malware to BadBox botnet, expanding vehicle infection surface for mass abuse.
Nutex Health Cyberattack Compromises Sensitive Patient Data
Nutex Health reports unauthorized access and exfiltration of sensitive healthcare data from company servers.
Get these articles delivered to your inbox.
Subscribe free