Critical Vulnerability in Collabora Exploited to Compromise Nextcloud Servers
PremiumAttackers exploited Collabora Online CODE Server RCE (CVE-2026-110447) to plant web shells and backdoor Nextcloud servers.
§Source · Bleeping Computer
Bleeping Computer
Every dispatch we have aggregated from Bleeping Computer.
All dispatchesToday
Wednesday, October 14
Monday, October 12
Massive Data Breach at Nippon Columbia Compromises Millions of Records
PremiumMalware at contractor Nippon Columbia exposed 8.7 million customer and employee records, including personal data of karaoke fans.
Critical SonicWall Vulnerability Under Active Exploitation
PremiumAttackers actively exploit maximum-severity SonicWall SMA1000 vulnerability CVE-2026-102255, patched three days earlier.
AI Tools Exploited in Cyberattacks on South Korean Banks
PremiumAttacker used ARTEX AI and Claude agents to orchestrate attacks against South Korean banks, amplifying automation risk in breaches.
Friday, October 9
ASOS Data Breach: Social Engineering and Credential Theft Uncovered
PremiumASOS links customer data exposure to social engineering that led to stolen employee credentials and unauthorized notifications to customers.
Uranium Crypto Exchange Hacker Sentenced for $53 Million Theft
PremiumA Maryland man convicted for two hacks of Uranium Finance, stealing over $53M from the decentralized exchange in 2021.
Wednesday, October 7
Phishing Alert: Fake AI Sites Target Advertising Accounts and MFA Codes
Phishing campaign uses fake ChatGPT/Gemini/Claude sites to steal ad accounts and MFA codes via browser-in-browser attacks.
Critical Vulnerabilities in WordPress Plugins Lead to Security Breaches
Stored XSS in Ninja Forms and WPC Product Bundles exploited to install backdoors and create rogue WordPress admin accounts.
Engineer Sentenced for Network Sabotage Impacting Thousands of Devices
Former engineer sentenced for locking 3,000+ employer devices in a ransomware-style sabotage on a Windows network.
Nikkei Employee Emails Compromised in Security Breach
Nikkei reports attackers breached employee Microsoft and Google accounts, using one to send thousands of phishing emails.
ASOS Investigates Security Breach After Unauthorized Notifications
ASOS confirms investigation after unauthorized 'HACKED' push notifications claimed Snowflake compromise and leaked customer data.
Monday, October 5
Danish University DTU Faces Major Data Breach Impacting Thousands
PremiumTechnical University of Denmark suffered an IAM compromise, exposing up to 200,000 users' data after attackers downloaded identity data.
US Treasury Targets Tren de Aragua in Nationwide ATM Security Crackdown
PremiumU.S. Treasury sanctioned Tren de Aragua members for ATM jackpotting thefts across the U.S., part of law enforcement crackdown.
Warlock Ransomware Targets SharePoint, Compromises Critical Sectors
PremiumWarlock exploited SharePoint vulnerabilities to deploy ransomware against water, telecom, and government organizations.
Citrix Urgently Patches NetScaler SAML Flaw Amid Reports of Reboots
PremiumCitrix released emergency NetScaler SAML patches, but customers report appliance reboots after installing the update.
Friday, October 2
Critical Vulnerability in FortiMail Exploited in Zero-Day Attacks
PremiumFortinet warns of critical FortiMail zero-day CVE-2026-104286 actively exploited to execute unauthorized commands and code.
Pentagon Data Breach Compromises Millions of Military Records
PremiumBreached Pentagon HR system exposed personal data of nearly three million military personnel after months-long intrusion.
Wednesday, September 30
Get these articles delivered to your inbox.
Subscribe free