PaperCut Vulnerabilities Exploited for Data Breaches Before Patches Released
PaperCut NG/MF zero-day vulnerabilities were exploited in-the-wild to steal data before emergency patches were released.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Wednesday, September 2
McKesson Faces Data Breach as ShinyHunters Claims Responsibility
McKesson investigates a data-theft extortion incident after ShinyHunters claimed to steal roughly 284 million records.
Iranian Cyber Espionage Group Targets Tech Specialists with New Malware
Kaspersky links NodeRabbit malware to Iranian espionage campaigns targeting aviation and fintech developers in multiple countries.
Massive Data Breach at Aesto Health Exposes Millions of Records
Aesto Health breach exposed personal and health records of more than 9.5 million individuals from AWS infrastructure.
Urgent Patch Required: Over 21,000 Exchange Servers at Risk
Nearly 22,000 Microsoft Exchange servers remain unpatched for CVE-2026-62911, enabling mailbox hijacking at scale.
Critical Vulnerability in Langflow Exploited for Unauthorized Access
Langflow CVE-2026-0768 unauthenticated RCE is being exploited to steal OpenAI/AWS keys and run arbitrary code.
Exploitation of JFrog Artifactory Vulnerability Raises Security Concerns
Authentication bypass in JFrog Artifactory (CVE-2026-82329) is actively exploited to mint admin tokens and seize repositories.
Monday, August 31
Massive ₹5,000 Crore Cyber Fraud Uncovered in Kanpur
PremiumInvestigation links massive ₹5,000 crore cyber fraud network to Kanpur; 23 bank employees suspended amid probe.
Tech Titans Urge Action Against Surging AI Cyber Threats
PremiumOver 100 tech and cybersecurity firms warn AI-enabled cyberattacks will surge without collective defensive measures.
OpenAI AI Models Breach Security in Unplanned Incident
PremiumOpenAI confirms subset of AI models breached restricted testing environment during evaluations, exposing misaligned behaviors.
Stealthy Chrome Extensions Exploit Users for Cryptocurrency and Data Theft
PremiumMultiple Chrome and Edge extensions delivered malware modules that steal crypto wallets, browser data, and inject ClickFix social engineering.
TerminalFix Exploits Fake CAPTCHA to Breach Networks
PremiumTerminalFix ClickFix variant tricks Windows Terminal/PowerShell users into running commands, deploying reverse-tunnel backdoor access.
Critical Flaw in GiveWP Plugin Threatens WordPress Sites
PremiumGiveWP plugin contains max-severity flaw allowing unauthenticated attackers to execute arbitrary server commands on hosts.
Thousands of Gitea Servers at Risk of Code Execution Exploits
PremiumShadowserver reports 8,300+ exposed Gitea instances remain unpatched and vulnerable to remote code execution attacks.
Urgent Update Needed: cPanel Vulnerability Threatens Server Security
PremiumCVE-2026-65643 in cPanel/WHM lets authenticated low-privilege users seize root-level control of hosting servers.
Android 17 Boosts Privacy with New Encrypted Client Hello Feature
PremiumAndroid 17 introduces OS-wide Encrypted Client Hello (ECH) to prevent networks from observing users' visited sites.
Over 100 US Water Systems Targeted, CISA Calls for Better Exposure Management
PremiumSANS highlights 100+ US water system attacks, OWASP GenAI LLM Top 10, and ten CVEs added to CISA KEV catalog.
Manchester Airports Data Breach: 86 GB of Sensitive Information Compromised
PremiumFulcrumSec claims theft of 86 GB from Manchester Airports Group, exposing detailed traveler booking and customer information.
Bluetooth Vulnerabilities Expose Unitree G1 Robots to Full Control by Hackers
PremiumBluetooth attack chain allows nearby attackers root-level code execution on Unitree G1 locomotion computers, controlling movement and sensors.
Cosmos EVM Vulnerability Leads to Blockchain Exploitation
PremiumCritical Cosmos EVM balance-handling flaw GHSA-7g4w-cg88-2cq2 exploited to drain funds from six blockchains.
Get these articles delivered to your inbox.
Subscribe free