Norwegian Government Services Disrupted by Major DDoS Attack
Massive DDoS disrupted Norway's government digital services, taking multiple public-facing systems offline.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Wednesday, August 26
US and UK Respond to Iranian Cyber Threats with Sanctions and Warnings
US sanctions Iranian cyber actors while the UK discloses a cyber intrusion that disrupted a small power plant.
AI-Driven ToxNetV2 Botnet Targets Linux Systems with Enhanced Attack Strategies
ToxNetV2 Linux botnet uses NVIDIA AI to propose shell and SSH attack commands, accelerating operator decision-making.
Cyberattack Causes UK Power Plant Outage and Car Systems Infection
SANS roundup: UK power plant outage, car proxy-malware botnet, and N-able Passportal/Keycloak vulnerability fixes.
Iranian Cyberattack Highlights Vulnerabilities in UK Critical Infrastructure
Iran-linked cyberattack on a UK power plant underscores vulnerabilities in critical national infrastructure and small energy assets.
WordPress Sites Under Siege from MiniOrange Plugin Vulnerabilities
Authentication bypasses CVE-2026-61979 and CVE-2026-15981 in miniOrange SAML 2.0 plugin are being exploited to forge admin logins.
New Malware Targets Car Head Units, Expands Notorious Botnet
Researchers link novel car head unit malware to BadBox botnet, expanding vehicle infection surface for mass abuse.
Nutex Health Cyberattack Compromises Sensitive Patient Data
Nutex Health reports unauthorized access and exfiltration of sensitive healthcare data from company servers.
Mirage2FA Exploits Microsoft 365 to Compromise Thousands of Companies
Mirage2FA phishing-as-a-service abused Microsoft 365 login flows, bypassing 2FA and compromising thousands of corporate accounts.
Australian Cybersecurity Center Urges Immediate Action on TeamCity Vulnerability
Australian authorities warn of active exploitation of a critical TeamCity flaw; customers urged to patch immediately.
Zimbra Servers Under Siege by Exploiting RCE Vulnerability
Over 270 Zimbra servers compromised via CVE-2026-73570 RCE; CISA issued a rapid patch directive.
Critical Oracle WebLogic Flaw Demands Immediate Attention
CISA says CVE-2026-21962 in Oracle WebLogic is actively exploited, enabling remote compromise; immediate patching recommended.
Monday, August 24
wp2shell Exploit Attempts Highlight Urgency in Vulnerability Response
Premiumwp2shell critical chain saw 45 million exploit attempts, illustrating compressed vulnerability exploitation windows for popular WordPress sites.
Grok Attack Exploits Encrypted Prompts for Data Theft
PremiumEncrypted prompt injection in xAI's Grok enables zero-click theft of names, locations, subscription tiers and prompt history.
Trojanized npm Packages Unleash AI-Powered RedC2 4.0 Backdoor
PremiumTrojanized npm packages install RedC2 4.0 Linux backdoor with AI-assisted command-and-control capabilities.
Pune Retiree Scammed Out of ₹1.15 Crore by Fraudulent Trading App
PremiumRetired official in Pune lost ₹1.15 crore to a fake trading app campaign promoted via social engineering.
Leaked AWS Access Keys Expose Corporate Accounts to Risk
PremiumOver 9,300 exposed AWS access keys remain active between 2022-2026, enabling potential full control over corporate accounts.
Microsoft Defender Driver Exploited for Kernel-Level File Deletion
PremiumCheck Point shows Microsoft Defender's signed BTR.sys boot-time driver can be misused for kernel-level deletion of security files at boot.
Isolated-vm Bug in Node.js Enables Host System RCE
PremiumType-confusion V8 sandbox bug enables isolated-vm escape and remote code execution on the host process.
Cisco Urges Immediate Updates After Discovering Critical Flaws
PremiumCisco fixes nine Crosswork and Secure Workload vulnerabilities, five rated CVSS 10.0 requiring urgent updates.
Get these articles delivered to your inbox.
Subscribe free