4+ day, 9+ hour ago   (750+ words) Researchers found 220.8 million passenger and crew records exposed through default credentials in a Vietnam-linked database containing sensitive travel data. Changing default credentials should be a no-brainer, yet researchers still found a route into a database holding more than 220 million passenger…...

4+ day, 8+ hour ago   (611+ words) Google warns that hackers are using AI agents to automate attack stages, harvest credentials, and accelerate cyberattacks with less human direction. Attackers are beginning to use AI agents to complete in hours some malicious tasks that previously required far more…...

4+ day, 15+ hour ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...

4+ day, 16+ hour ago   (323+ words) The quantum threat may still be ahead, but the work to prepare for it has already started. The G7 says uncertainty over when a cryptographically relevant quantum computer will emerge is no reason for organizations to delay preparations. On Sept. 3, 2026, the…...

5+ day, 21+ hour ago   (404+ words) Fake Minecraft sites continue distributing WeedHack malware through SEO poisoning and trusted hosting platforms despite disruption of its original C2 infrastructure. Disrupting WeedHack’s command-and-control infrastructure did not stop its distribution. Fake Minecraft client sites and trusted hosting services continued serving the…...

6+ day, 18+ hour ago   (568+ words) Cloudflare is using OpenAI GPT-5.6 Cyber to automate vulnerability discovery and remediation as AI agents reshape enterprise security operations. Cloudflare has announced Vulnerability Discovery and Remediation, a new service designed to automate vulnerability discovery, generate code fixes, and deploy edge…...

1+ week, 2+ day ago   (382+ words) CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack. AI gateways are becoming high-value attack surfaces. CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on…...

1+ week, 2+ day ago   (772+ words) Most enterprises would say they have a cyber resilience strategy. They back up data with platforms like Veeam, Rubrik, or Cohesity. Identity is managed through Okta or Microsoft Entra ID. Cloud infrastructure lives across AWS, Azure, and Google Cloud. Network and…...

1+ week, 2+ day ago   (587+ words) PaperCut pre-authentication RCE: A PaperCut remote code execution flaw is being exploited in the wild, with Huntress observing attacks against two customers. PaperCut considers all NG and MF versions potentially affected. Organizations should update PaperCut immediately, remove public access, preserve…...

1+ week, 5+ day ago   (695+ words) China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network....