2026-09-15 20:46 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-15 21:35 UTC
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Secure Email Gateway flaw, tracked as CVE-2026-76461 (CVSS score of 9,8), to its Known Exploited Vulnerabilities (KEV) catalog. Cisco disclosed a critical zero-day CVE-2026-76461 this week; […]
P60
2026-09-15 20:36 UTC
Vendor Research
Cisco Security Advisories · indexed 2026-08-15 14:33 UTC
Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities…
P5
2026-09-15 20:34 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-09-15 20:35 UTC
Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a threat actor compromised the maintainer's website and pushed updates that created a hidden user account. [...]
P0
2026-09-15 20:24 UTC
Security Journalism
Security Week · Associated Press · indexed 2026-09-15 20:40 UTC
Microsoft agreed to adopt guardrails and privacy standards for its AI in schools, as negotiated with the American Federation of Teachers. The post Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow? appeared first on SecurityWeek.
P0
2026-09-15 20:16 UTC
Security Journalism
Dark Reading · Rob Wright · indexed 2026-09-15 20:35 UTC
You can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches.
P0
2026-09-15 20:01 UTC
Security Journalism
The Record · indexed 2026-09-15 20:20 UTC
Oslo-based Telenor potentially enabled crimes against humanity and violated sanctions in its dealings with the military regime that took over Myanmar in 2021, Norwegian authorities said.
P0
2026-09-15 19:30 UTC
Security Journalism
Security Week · Sravish Sridhar · indexed 2026-09-15 19:40 UTC
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. The post “We Think the Security Control Is Working” Is No Longer Good Enough appeared first on SecurityWeek.
P0
2026-09-15 19:27 UTC
Security Journalism
Dark Reading · Black Hat Staff · indexed 2026-09-15 19:35 UTC
At Black Hat USA, OpenAI engineers reconstruct the Hugging Face incident and explore lessons learned about AI safeguards and cyber resilience.
P0
2026-09-15 19:00 UTC
Vendor Research
AWS Security Blog · Abrom Douglas · indexed 2026-09-15 19:30 UTC
Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It’s how users sign in, access services, and engage with your applications. As your business scales across geographies, ensuring authentication is always available becomes a core architectural requirement. However, building multi-Region authentication has traditionally required complex custom replication solutions that […]
P0
2026-09-15 18:54 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-15 19:10 UTC
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google Chrome and
P0
2026-09-15 17:00 UTC
Vendor Research
Tenable Blog · Research Special Operations · indexed 2026-09-15 21:15 UTC
Oracle addresses 672 CVEs in its September 2026 Critical Security Patch Update with 673 patches, including 104 critical updates.Key TakeawaysThe September 2026 Critical Security Patch Update (CSPU) contains fixes for 672 unique CVEs in 673 security updates104 issues (15.5% of all patches) were assigned a critical severity ratingOracle E-Business Suite received the highest number of patches at 159, accounting for 23.6% of all patchesBackgroundOn September 15, Oracle released its Critical Securit…
P5
2026-09-15 16:45 UTC
Security Journalism
Dark Reading · Elizabeth Montalbano · indexed 2026-09-15 17:05 UTC
The full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access.
P0
2026-09-15 16:40 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-09-15 16:45 UTC
CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company. [...]
P0
2026-09-15 16:29 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-15 17:45 UTC
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can copy a target's emails and chat messages, take screenshots, and activate the microphone to record
P0
2026-09-15 16:28 UTC
Security Journalism
The Record · indexed 2026-09-15 16:35 UTC
According to the United Kingdom’s National Cyber Security Centre (NCSC), Iran has used this and similar cyber activity to “support the repression of individuals who are seen as a threat to the regime, such as dissidents, activists and journalists.”
P0
2026-09-15 16:00 UTC
Security Journalism
Security Week · Kevin Townsend · indexed 2026-09-15 16:00 UTC
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. The post $1 Million Sandbox Challenge Uncovers Linux Kernel Flaws appeared first on SecurityWeek.
P0
2026-09-15 15:53 UTC
Vendor Research
AWS Security Blog · Luis Pastor · indexed 2026-09-15 16:05 UTC
The principle of least privilege is straightforward to articulate but challenging to maintain at scale. When teams first deploy applications to AWS, they often grant broader permissions than strictly necessary; it’s faster to get things working, and the plan is always to tighten permissions later. But later rarely comes. Permissions accumulate, AWS Identity and Access […]
P0
2026-09-15 15:45 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-15 16:00 UTC
The cybersecurity startup is building a proprietary foundation model and plans to accelerate global expansion. The post Exein Secures $270M at $1.7B Valuation for Physical AI Security appeared first on SecurityWeek.
P0
2026-09-15 15:30 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-09-15 15:40 UTC
A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems. The post Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data appeared first on SecurityWeek.
P0
2026-09-15 15:23 UTC
Community
SANS Internet Storm Center · indexed 2026-09-15 15:40 UTC
I have not done this type of diary in a while: What traffic will you see from a system on boot, before a user logs in? I just took a quick look at macOS 27 "Golden Gate" to see what traffic you should expect. Here are some of the highlights:
P0
2026-09-15 15:23 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-09-15 15:50 UTC
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.
P0
2026-09-15 15:09 UTC
Security Journalism
The Record · indexed 2026-09-15 15:25 UTC
Ihor Klymenko, who has experience in law enforcement and as interior minister, will run Ukraine's National Cybersecurity Coordination Center.
P0
2026-09-15 15:00 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-09-15 15:10 UTC
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...]
P0
2026-09-15 14:45 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-09-15 14:55 UTC
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...]
P10
2026-09-15 14:22 UTC
Security Journalism
The Record · indexed 2026-09-15 14:40 UTC
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
P0
2026-09-15 14:00 UTC
Security Journalism
Huntress · indexed 2026-09-15 14:40 UTC
Reduced staffing during holidays changes more than headcount. Learn how operational resilience should shape your IT and security change decisions
P0
2026-09-15 13:45 UTC
Security Journalism
BleepingComputer · Sponsored by Picus Security · indexed 2026-09-15 14:05 UTC
AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits. Picus Security explains how exploitability validation, security control testing, and autonomous pentesting can help teams close exposure gaps before attackers arrive. [...]
P25
2026-09-15 13:33 UTC
Security Journalism
Security Week · Ionut Arghire · indexed 2026-09-15 13:45 UTC
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools. The post Thai Broadband Provider Hacked via Fortinet Vulnerability appeared first on SecurityWeek.
P10
2026-09-15 13:32 UTC
Vendor Research
Tenable Blog · Ben Mudie · indexed 2026-09-15 13:40 UTC
Australia’s move from the Essential Eight to an outcomes-based cybersecurity model will push organizations from conducting periodic point-in-time, checklist compliance assessments to having continuous evidence of a solid security posture.Key takeawaysThe Australian Signals Directorate (ASD) is moving from the Essential Eight cybersecurity framework to a new outcomes-focused Essentials series covering enterprise IT, cloud, operational technology (OT), and potentially agentic AI.The Essential Eig…
P0
2026-09-15 13:00 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-09-15 13:45 UTC
Cisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails. Cisco disclosed a critical zero-day, tracked as CVE-2026-76461 (CVSS score of 9.8), affecting Secure Email Gateway appliances. The flaw can be exploited remotely without authentication. Attackers can send specially crafted emails containing malicious SQL […]
P50
