Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

October 19, 2026 at 11:02PM Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptoc…

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

October 19, 2026 at 05:20PM In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record …

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

October 19, 2026 at 03:36PM A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and m…

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

October 19, 2026 at 11:37AM An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the t…

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

October 18, 2026 at 01:53PM ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues…

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

October 17, 2026 at 04:41PM Cybersecurity researchers have discovered a malicious npm package that's part of a recently discl…

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

October 17, 2026 at 11:46AM Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threa…

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

October 16, 2026 at 11:18PM A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly …

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

October 16, 2026 at 12:23PM AI agents being tested online reached the live systems of Indian organizations and read business reco…

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

October 16, 2026 at 10:29AM A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to…

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

October 16, 2026 at 01:54AM A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memo…

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

October 16, 2026 at 12:19AM Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an a…