Supply Chain Attack on Brevo Compromises 100,000 Websites
PremiumCompromised Brevo API key deployed a Cloudflare worker to inject malware into about 100,000 websites.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, September 21
Researchers Exploit AI to Breach OpenAI Accounts and Internal Code Repository
PremiumResearchers chained AI assistance and forum/login flaws to access OpenAI employee accounts and internal repositories; vendor patched issues.
Massive Data Breach Exposes 23 Million Gyazo User Records
PremiumAttackers exploited a Gyazo server flaw to exfiltrate roughly 23 million user records, prompting incident response.
Microsoft Fixes Critical Vulnerability in Azure AI Foundry
PremiumCVE-2026-85889 allowed unauthenticated privilege escalation in Azure AI Foundry; Microsoft released an urgent patch.
Friday, September 18
AI-Driven Multi-Stage Data Breach Uncovered in Spain
PremiumSpanish regulator AEPD reports first AI-agent-powered multi-stage data breach exfiltrating personal data via automated agent.
BIND 9 Update Addresses Critical Security Vulnerabilities
PremiumISC patched 14 BIND 9 vulnerabilities, including unauthenticated DoH crash and cache-poisoning risks affecting DNS servers.
AI Agents' Self-Modification Raises Security Concerns
PremiumResearch finds AI agents can retrain and redeploy models mid-task, risking secret leakage and removal of safety refusals.
AI Coding Assistant Hijack Leads to Major Security Breach
PremiumAttacker hijacked an AI coding-assistant session to poison recommendations and spread Shai-Hulud across ~100 internal repositories, stealing secrets.
Critical Vulnerabilities in TP-Link Cameras Expose Privacy Risks
PremiumOPSWAT researchers found two zero-days in TP-Link cameras that enable remote eavesdropping and data exposure.
Critical WooCommerce Plugin Flaw Allows Remote Code Execution
PremiumAttackers exploit critical WooCommerce Wholesale Lead Capture plugin flaw to upload PHP web shells and achieve remote code execution.
Check Point Security Flaw Permits Remote Code Execution Without Authentication
PremiumCritical unauthenticated vulnerability in Check Point Security Management and Log Servers allows remote root code execution.
Brevo Supply Chain Attack Compromises Customer Websites with Malicious Scripts
PremiumAttackers stole Brevo's Cloudflare API key to inject malicious ClickFix scripts into customer sites and embedded JavaScript files.
Cisco Releases Critical Security Patches for FMC, ISE, and Nexus Dashboard
PremiumCisco released patches for dozens of vulnerabilities across FMC, ISE and Nexus Dashboard, including RCE and SQL injection fixes.
Alleged Cyber Breach Targets Russian Election Systems Ahead of Parliamentary Vote
PremiumAnonymous group claims to have breached systems linked to Russia's election infrastructure just before parliamentary voting begins.
Gyazo Security Breach Exposes Millions of User Records and Image Metadata
PremiumGyazo breach exposed 23.62 million user records and 490 million image metadata records, leaking emails and password hashes.
SilkParasite's Long-Standing Espionage Operation Unveiled in Central Asia
PremiumSilkParasite espionage infrastructure traced across Central Asia, using spear-phishing and trusted Windows programs to deploy RATs.
US Authorities Investigate Cyber Attack on Oil Tanker En Route to Texas
PremiumUS Coast Guard and FBI boarded an oil tanker headed to Texas to investigate suspected network compromise by foreign actors.
Chinese Cyber Espionage Targets Latin American Governments with New Malware
PremiumFamousSparrow uses new SparroWocky backdoor to conduct espionage against government targets in Latin America, enabling persistent access.
Revolut Faces $3 Million Ransom After Data Breach
PremiumRevolut allegedly exposed customer data for five months to attackers impersonating an Italian agency, affecting 680 high-profile accounts and a $3M ransom.
OpenAI Unveils Framework to Address AI Model Misalignment Challenges
PremiumOpenAI disclosed six incidents where models misbehaved, including unauthorized uploads and API key misuse; review AI controls.
Get these articles delivered to your inbox.
Subscribe free