Critical Windows Shell Vulnerability Patched Amid Active Exploitation
PremiumMicrosoft patched actively exploited Windows Shell zero-day CVE-2026-96951 that bypasses Mark of the Web protections (CVSS 8.8).
§Source · Cybersecurity News
Cybersecurity News
Every dispatch we have aggregated from Cybersecurity News.
All dispatchesToday
Critical Flaw in ChatGPT's GitHub Integration Exposes Private Repository Secrets
PremiumCritical ChatGPT GitHub integration flaw could be manipulated to modify private repos and exfiltrate repository secrets via Actions.
Burger King Japan Data Breach Impacts Millions of App Users
PremiumBurger King Japan breach exposed roughly 11.18 million app member records after unauthorized access to membership systems.
Wednesday, October 14
Zoom Flaws Risk Sensitive Data Exposure via Network Access
Certificate validation flaws in Zoom clients could allow attackers to access sensitive notes and data without authentication via network control.
Fortinet FortiSandbox Vulnerability Poses Significant Security Risk
FortiSandbox GUI auth bypass CVE-2026-107656 could let remote attackers access administrative functions without credentials.
Microsoft Introduces Risk Cohorts in October Patch Tuesday Update
Microsoft's October patch batch addresses over 1,400 vulnerabilities and introduces risk cohorts to help prioritization.
Monday, October 12
GhostAction Attack Breaches Hundreds of GitHub Repositories to Steal Sensitive Data
PremiumGhostAction campaign used hijacked maintainer accounts to plant malicious workflows in 346 GitHub repos to steal CI/CD secrets.
Urgent Security Patch Required for Citrix NetScaler ADC and Gateway
PremiumCitrix warns of critical NetScaler ADC/Gateway RCE CVE-2026-107406, urging immediate patching to prevent remote code execution.
AT&T Settles for $177 Million After Data Breaches Expose Millions
PremiumAT&T agreed to pay $177 million to settle lawsuits over two 2024 customer data breaches exposing personal details and call records.
Zenity Labs Uncovers AWS Bedrock AgentCore Vulnerability Exposing Cloud Credentials
PremiumZenity Labs' AgentCorruption shows a prompt can hijack AWS Bedrock AgentCore agents to access chats, memories, and cloud secrets.
Anthropic's AI Models Exploit Software Flaws, Raising Security Concerns
PremiumClaude exploited injection flaws during tests; Anthropic cuts live internet access and launches OSS Scanner to help defenders.
Ransomware Groups Exploiting Palo Alto VPN Vulnerability
PremiumRansomware groups exploit Palo Alto GlobalProtect authentication bypass (CVE-2026-0257) to create unauthorized VPN sessions and access internal networks.
Friday, October 9
Surge in Exploitation Attempts on Hikvision Cameras Triggers Security Concerns
PremiumIncreased scanning and RCE attempts targeted unpatched Hikvision CVE-2021-36260 surveillance devices, especially in Ukraine.
Sungrow Inverter Flaw Exposed Solar Plants to Unauthorized Access
PremiumCritical Sungrow inverter flaw allowed access to iSolarCloud without valid passwords, risking control of solar plants and battery systems.
Wednesday, October 7
Iranian Hackers Exploit Fake Recruitment to Infiltrate Iraqi Infrastructure
Iranian-affiliated Blinder Tunnel campaign used a booby-trapped Dubai Airports coding test to target Iraqi critical infrastructure for persistence and tunneling.
Citrix Urges Urgent Updates as NetScaler Vulnerability Exploited
Critical NetScaler zero-day is actively exploited, causing DoS and federal risk advisories; immediate updates recommended.
Monday, October 5
Apache Releases Critical Update for HTTP Server Vulnerabilities
PremiumApache released HTTP Server 2.4.69 addressing 20 vulnerabilities that could allow code execution, auth bypass, data leaks, and DoS.
Microsoft Urges Rapid Update for Critical Exchange Server Flaw
PremiumMicrosoft reissued Exchange Server V2 updates to fix CVE-2026-96940, an authz flaw allowing intra-org mailbox access and exfiltration risks.
Debian Patches Over 1,300 Security Flaws in Major Update
PremiumDebian released a large kernel/security update addressing 1,313 CVEs that risk privilege escalation, DoS, and information leaks.
Dell Patches Critical Vulnerabilities in Container Storage Modules
PremiumDell patched critical Container Storage Module vulnerabilities allowing unauthenticated attackers to gain full administrative control of storage environments.
Get these articles delivered to your inbox.
Subscribe free