Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

September 6, 2026 at 01:44AM Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce tha…

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

September 5, 2026 at 09:35PM Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusio…

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

September 5, 2026 at 07:47PM Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. …

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

September 5, 2026 at 01:25PM A group of AI safety researchers says a fleet of autonomous agents that identified themselves as Ope…

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

September 5, 2026 at 01:01PM Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in at…

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

September 4, 2026 at 12:17PM OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the "world's most…

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

September 3, 2026 at 11:32PM The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A sim…

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

September 3, 2026 at 02:13PM The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Grou…

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

September 3, 2026 at 10:49AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security f…

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

September 2, 2026 at 11:57PM Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cyberse…

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

September 2, 2026 at 12:26PM The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-pe…

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

September 1, 2026 at 10:49PM Brazilian financial services, retail, and e-commerce organizations have become the target of a finan…