N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

September 7, 2026 at 02:01PM Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day ea…

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

September 7, 2026 at 01:23PM Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware…

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

September 6, 2026 at 02:04PM Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER,…

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

September 6, 2026 at 01:44AM Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce tha…

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

September 5, 2026 at 09:35PM Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusio…

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

September 5, 2026 at 07:47PM Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. …

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

September 5, 2026 at 01:25PM A group of AI safety researchers says a fleet of autonomous agents that identified themselves as Ope…

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

September 5, 2026 at 01:01PM Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in at…

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

September 4, 2026 at 12:17PM OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the "world's most…

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

September 3, 2026 at 11:32PM The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A sim…

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

September 3, 2026 at 02:13PM The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Grou…

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

September 3, 2026 at 10:49AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security f…