Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

September 11, 2026 at 11:49AM Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored att…

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

September 10, 2026 at 11:17PM A lot of this week’s security news has the same awkward answer to one question: “Why was that allow…

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

September 10, 2026 at 12:34PM Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model …

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

September 9, 2026 at 10:04PM Multiple espionage-motivated threat activity clusters have been found deploying a previously undocum…

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

September 9, 2026 at 12:17PM The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet anothe…

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

September 9, 2026 at 11:55AM SAP has released security updates to address multiple vulnerabilities, including a maximum-severity …

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

September 9, 2026 at 10:11AM Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabiliti…

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

September 9, 2026 at 09:57AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity…

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

September 8, 2026 at 02:13PM Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poi…

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

September 8, 2026 at 12:30PM Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K…

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

September 7, 2026 at 11:42PM Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolk…

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

September 7, 2026 at 04:50PM A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJ…