Tag: attack
-
EU chief wants joint response to cyberattacks, sabotage
Delivering her annual State of the Union address in Strasbourg, Ursula von der Leyen said threats were “mounting on our soil,” pointing to recent incidents in Denmark, Lithuania and Poland and an attempted drone attack in Leipzig. First seen on therecord.media Jump to article: therecord.media/eu-chief-wants-joint-response-to-cyberattacks
-
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity.From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud First…
-
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions – Acronis Backup…
-
Critical ScreenConnect flaw now actively exploited in attacks
Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-screenconnect-flaw/
-
Cyber-Attacks Cost Organizations $52,000 on Average
Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/
-
Cyber-Attacks Cost Organizations $52,000 on Average
Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/
-
Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)
A Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis’ backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/16/acronis-backup-plugin-vulnerability-exploited-cve-2026-87886/
-
Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)
A Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis’ backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/16/acronis-backup-plugin-vulnerability-exploited-cve-2026-87886/
-
Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges
Acronis has released an urgent security update for a high-severity local privilege escalation vulnerability affecting its Backup plugin for cPanel & WHM on Linux. The company confirmed that attackers have already exploited this flaw in limited, targeted attacks against vulnerable deployments. This vulnerability is tracked as CVE-2026-87886 and is described as an insecure file permissions…
-
CISOs to Watch in Atlanta: From City Hall to the Credit Bureau
Atlanta has more reason than most cities to take security leadership seriously. The 2018 ransomware attack on city systems and the 2017 Equifax breach both happened here, and both organisations appear on this list under new security leadership. The other… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cisos-to-watch-in-atlanta-from-city-hall-to-the-credit-bureau/
-
Shared AI Memory Lets Hundreds of Agents Inherit Exploits and Join Coordinated Attacks
A shared message board turned isolated AI agents into an effective offensive collective during OpenAI’s July 2026 ExploitGym evaluations, enabling roughly 1,200 agents to exchange more than 70,000 messages and files. About 700 eventually participated in activity that compromised portions of Hugging Face’s production environment showing that shared agent memory can become a high-risk coordination…
-
The modern attack chain: Rethinking Google Workspace security in the age of AI
Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/16/material-google-workspace-attack-chains/
-
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
3,022 RubyGems packages associated with the GemStuffer campaign, expanding the known scope of an incident that researchers have linked to an alleged OpenAI agent swarm. The inventory covers 3,315 distinct package name-and-version pairs and reveals a sustained campaign that combined documentation-worker abuse, data collection, credential-theft attempts, and metadata-based web attack tests. When a documentation worker…
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs
The Hugging Face Wake-Up Call: What an Autonomous AI Attack Means for CISOs andrew.gertz@t“¦ Wed, 09/16/2026 – 01:04 Data Breach Data Security Encryption Key Management Identity & Access Management Camille Charaudeau – Global Vice President, Strategy & Innovation More About… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-hugging-face-wake-up-call-what-an-autonomous-ai-attack-means-for-cisos/
-
CVE Authorities Make Score 8 Look More Like the New 10
Exploit Maturity Can Lower Scores Until Attack Evidence or PoCs Emerge. CVSS 4.0 lets threat intelligence alter a vulnerability’s enriched score without changing its Base severity, prompting experts to warn that vendors and defenders must continuously reassess exploitation, exposure and patch priority. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cve-authorities-make-score-8-look-more-like-new-10-a-32829
-
Cisco warns customers of actively exploited zero-day in email gateways
The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the attacks or the scope of impact across its customer base. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisco-secure-email-gateway-zero-day-exploited/
-
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems.The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South…
-
1.8M Android APKs Scanned for Hardcoded Secrets in Automated Attack
Attackers scanned 1.8 million Android APKs for hardcoded secrets, showing why developers need stronger credential management and production-build security. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-android-apps-hardcoded-secrets-credential-scanning/
-
Critical VMware RCE flaw now exploited by ransomware gangs
Tags: attack, cisa, cybersecurity, exploit, flaw, infrastructure, ransomware, rce, remote-code-execution, vcenter, vmware, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-critical-vmware-vcenter-rce-flaw-now-exploited-by-ransomware-gangs/
-
Phishing Attacks Abuse Trusted Email Infrastructure and URL Cloaking to Evade Security Filters
Tags: attack, cyber, email, infrastructure, mail, malicious, malware, open-source, phishing, servicePhishing operators are increasingly shifting away from malware-laden attachments and toward trusted delivery services, authenticated domains, and multi-stage URL cloaking designed to defeat conventional email inspection. The continuously running VBSpam comparative test evaluated ten public full email-security products and one open-source solution against wanted, unwanted, and malicious mail streams. The assessment was conducted under the…
-
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
IntroductionSecurity teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise.But no matter how much…
-
25 Years of Mass Surveillance Is Enough
This essay was written with Cindy Cohn, and originally appeared in Lawfare. One of the many legacies of the terrorist attacks of Sept. 11 is the government-wide shift from targeted surveillance”, such as individual wiretaps or pen register/trap and trace orders”, to… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/25-years-of-mass-surveillance-is-enough/
-
DDRop Attack Forces Intel TDX Confidential VMs Into Debug Mode and Exposes Memory
A newly disclosed hardware attack dubbed DDRop can undermine Intel Trust Domain Extensions (TDX) by manipulating DDR5 memory traffic, allowing an attacker with physical server access to force confidential virtual machines into debug mode and extract private memory in plaintext. Researchers from KU Leuven, ETH Zurich, Google, Durham University, and other institutions released proof-of-concept code,…
-
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/