Tag: access
-
Threat Gang ‘Springs’ Vishing Attacks on Microsoft Teams Users
The Spring Ring operation aims to compromise users of the collaboration suite to remotely access their sessions, spread malware, and even take over infrastructure. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/threat-gang-springs-vishing-attacks-microsoft-teams-users
-
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise.The incident window ran from approximately August 28 at 20:57…
-
Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners
Hackers reportedly gained access to payment accounts used by two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor email addresses and limited payment card information. First seen on therecord.media Jump to article: therecord.media/hackers-russia-fundraisers-ukraine
-
Attackers Pounce on Critical Artifactory Bug Following Disclosure
CVE-2026-82329 is an authentication bypass flaw in JFrog’s repository manager that enables bad actors to gain admin-level access on affected systems. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/attackers-pounce-critical-artifactory-flaw-disclosure
-
Attackers Pounce on Critical Artifactory Bug Following Disclosure
CVE-2026-82329 is an authentication bypass flaw in JFrog’s repository manager that enables bad actors to gain admin-level access on affected systems. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/attackers-pounce-critical-artifactory-flaw-disclosure
-
Hackers Exploit LiteLLM Admin API Flaw to Turn Read-Only Access Into Full Server Takeover
Attackers are actively exploiting a critical authorization flaw in LiteLLM’s administrative API. This vulnerability allows low-privileged, read-only users to modify proxy configurations, expose sensitive secrets, and potentially gain full administrator control over affected servers. Researchers at Zenity Labs tracked approximately 3,900 requests targeting LiteLLM’s administration endpoints from February to June 2026, originating from 73 different…
-
Microsoft Defender flags legitimate Google search links as malicious
Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate Google search links. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-defender-flags-legitimate-google-search-links-as-malicious/
-
Microsoft Defender flags legitimate Google search links as malicious
Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate Google search links. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-defender-flags-legitimate-google-search-links-as-malicious/
-
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks.The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, are listed below – CVE-2026-83548 (CVSS score: 10.0) – A pre-authentication SSRF vulnerability in the Appliance First seen…
-
The PAM Migration Trap: Modernizing Your Vault Doesn’t Modernize Privileged Access
PAM modernization should reduce standing privilege, not just move credentials into a newer vault. True progress means eliminating unnecessary privileged identities. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-pam-migration-trap-modernizing-your-vault-doesnt-modernize-privileged-access/
-
Attackers are going after prominent individuals through OAuth phishing, FBI warns
Attackers are targeting prominent individuals, their relatives and personal contacts to gain persistent access to their accounts, including private emails and files, the FBI … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/02/oauth-consent-phishing-fbi-warning/
-
Critical SonicWall SMA 1000 Vulnerabilities Actively Exploited in the Wild
SonicWall has issued an urgent security advisory regarding two vulnerabilities affecting its SMA 1000 Series secure access appliances. The company warns that there have been cases indicating active exploitation in the wild. The vulnerabilities are tracked as CVE-2026-83548 and CVE-2026-83549 and impact SonicWall SMA 1000 models 6210, 7210, and 8200v that are running vulnerable platform…
-
Hackers Breach Brazilian Financial Firms and Execute Hundreds of Fraudulent Transactions
A financially motivated threat actor tracked as BREEZE COMET has breached Brazilian financial, retail, and eCommerce organizations, using privileged access to payment platforms to execute hundreds of fraudulent transactions in tightly timed waves. The activity overlaps with clusters publicly identified as Plump Spider and SHADOW-AETHER-064, although GTIG’s reporting frames this as operational overlap rather than…
-
Hackers Hide Reverse Shell Traffic Behind Signed Apps and AWS API Gateway
Threat actors are using a layered fake IT-support campaign to obtain remote access, deploy a malicious MSI package and conceal hands-on-keyboard activity behind legitimate signed applications and AWS API Gateway infrastructure. The operation demonstrates how attackers can divide execution, command-and-control and interactive shell functions across multiple processes to frustrate conventional endpoint and network detections. Once…
-
Datenklau aus der Cloud: Tausende Dropbox-Konten über Lenovo-Bug kompromittiert
Angreifer hatten Zugriff auf Dropbox-Inhalte von etwa 5.000 Nutzern. Ursache war eine Sicherheitslücke in einer alten Lenovo-Integration. First seen on golem.de Jump to article: www.golem.de/news/datenklau-aus-der-cloud-tausende-dropbox-konten-ueber-lenovo-bug-kompromittiert-2609-212522.html
-
Datenklau aus der Cloud: Tausende Dropbox-Konten über Lenovo-Bug kompromittiert
Angreifer hatten Zugriff auf Dropbox-Inhalte von etwa 5.000 Nutzern. Ursache war eine Sicherheitslücke in einer alten Lenovo-Integration. First seen on golem.de Jump to article: www.golem.de/news/datenklau-aus-der-cloud-tausende-dropbox-konten-ueber-lenovo-bug-kompromittiert-2609-212522.html
-
Trojanized Exodus Wallet Installer Deploys RAT to Steal Browser Credentials and Cookies
A sophisticated malware campaign has abused a trojanized installer for the legitimate Exodus cryptocurrency wallet to deploy a modular remote access trojan (RAT) capable of stealing browser credentials, session cookies, and extension data. The campaign prioritizes long-term interactive access over direct cryptocurrency theft, combining hidden VNC, SOCKS proxying, file management and browser-data theft in an…
-
Anthropic Unveils Claude Fable 5.1 and Mythos 5.1 With Powerful Cybersecurity Capabilities
Anthropic has launched Claude Fable 5.1 and Claude Mythos 5.1, two versions of the same advanced AI model designed to enhance capabilities in coding, knowledge work, scientific research, and cybersecurity operations. While Fable 5.1 is available to the general public, Mythos 5.1 is restricted to vetted organizations through trusted-access programs focused on cyber defense and…
-
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency
Threat actors exploited commodity in ownCloud to gain initial access, resulting in stolen reactor databases, personnel records, and credential stores. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency
-
Digital ID challenges remain despite government U-turn, says NAO
While the government may have cancelled its digital ID scheme, challenges such as fragmented data, digital access to public services and public trust remain First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366649801/Digital-ID-challenges-remain-despite-government-U-turn-says-NAO
-
Attackers Pounce on Critical Artifactory Flaw Following Disclosure
CVE-2026-82329 is an authentication bypass flaw in JFrog’s repository manager that enables bad actors to gain admin-level access on affected systems. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/attackers-pounce-critical-artifactory-flaw-disclosure
-
OpenAI Is About to Release Its First AI Model With ‘Critical’ Cyber Abilities
The company will give select partners early access to its Astra AI model”, so they have time to shore up their defenses. First seen on wired.com Jump to article: www.wired.com/story/openai-astra-first-ai-model-with-critical-cyber-abilities/
-
How Keeper Privileged Cloud Delivers Zero Standing Privilege
Keeper Privileged Cloud delivers Zero Standing Privilege (ZSP) by extending KeeperPAM®’s Just-In-Time (JIT) access framework to cloud identity platforms. A user gets elevated permissions only after a request is approved; those permissions last for a set time window, and Keeper… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/how-keeper-privileged-cloud-delivers-zero-standing-privilege/
-
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr.The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory.”JFrog Artifactory contains an authentication weakness that, under default First seen on thehackernews.com Jump…
-
Attacks Targeting Langflow AI Agent-Building Tool Surge
Tags: access, ai, attack, credentials, exploit, framework, ibm, intelligence, open-source, software, tool, vulnerabilityTool’s Access to Compute Resources, Keys and Credentials Make It a Repeat Target. Open-source framework Langflow, designed to build artificial intelligence agents and workflows, is under fire again, with attackers now wielding exploit code for a vulnerability first detailed in January. Outdated versions of the IBM-maintained software with known vulnerabilities appear to abound. First seen…
-
What Is Privileged Access Management (PAM)?
Privileged access management (PAM) is the set of policies, workflows, and tools that control, monitor, and audit how users (typically developers, IT admins, and ops teams) access an organization’s most sensitive systems and data.Key TakeawaysPAM is a specialized area of… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/what-is-privileged-access-management-pam-2/
-
Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records
Aesto Health suffered a breach exposing personal and health data of more than 9.5 million people after attackers accessed its AWS infrastructure. Aesto Health, a U.S. healthcare technology company, disclosed a data breach that exposed personal and health information belonging to more than 9.5 million people. The company discovered the incident on December 18, 2025,…
-
Mirage Kitten Hackers Use Fake Coding Challenges to Deploy NodeRabbit and PollCat RATs
Iran-linked threat actor Mirage Kitten is targeting software developers with fake recruitment assessments that hide two newly identified cross-platform remote access trojans: NodeRabbit and PollCat. The campaign uses recruiter impersonation on LinkedIn and other job-search platforms, weaponized Node.js projects, and cloud-hosted ZIP archives to gain covert access to developer endpoints across Windows, Linux, and macOS.…