Cyber Security News

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have released final technical guidance to stop attackers from forging, stealing, replaying, or misusing identity and access tokens. Published as NIST Interagency Report 8587 on September 15, 2026, it gives federal agencies and cloud service providers a roadmap for […]

The post CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse appeared first on Cyber Security News.

CISA and five international cybersecurity agencies have released detailed guidance describing 17 common techniques hackers use to compromise Microsoft Active Directory environments. The technical guide explains how attackers exploit identity configurations, legacy protocols, certificate services, and privileged systems to escalate access, move laterally, and establish long-term persistence inside enterprise networks. Developed by the Australian Signals […]

The post CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory Environments appeared first on Cyber Security News.

Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Vision Pro, Safari, and Xcode. The patches arrived on September 14, 2026, through iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27, and Xcode 27, […]

The post Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices appeared first on Cyber Security News.

You can’t detect today’s attacks with yesterday’s threat intelligence; that’s how you could briefly formulate the challenge many modern SOCs face.  Indicators lose relevance quickly. New infrastructure appears daily. SOCs struggle to keep up.  This is happening because malware campaigns increasingly rely on rotating domains, hosting infrastructure, and phishing flows. Attackers don’t need to come […]

The post How to Keep Malware’s Rotating Infrastructure From Becoming a Detection Gap  appeared first on Cyber Security News.

Microsoft has published a draft Humanist AI Code of Conduct that would prohibit its in-house MAI models from launching cyberattacks, supplying operational attack capabilities, or increasing their own privileges. The rules also require agents to remain interruptible, transparent, and confined to human-assigned permissions and objectives. The document, released for a six-week public consultation, is intended […]

The post Microsoft Bans Its AI Models From Launching Cyberattacks or Escalating Their Own Access appeared first on Cyber Security News.

Hackers are advertising a new “uncensored” artificial intelligence service called Luciferus, positioning it as a subscription assistant willing to process malware-development requests that mainstream AI systems would reject. Sophos Counter Threat Unit (CTU) researchers discovered the offering on August 24, 2026, on the Exploit underground forum. It targets criminal customers seeking fewer technical and operational […]

The post Hackers Advertise Uncensored Luciferus AI Service on Underground Forums appeared first on Cyber Security News.

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting the flaw in real-world attacks. The issue, tracked as CVE-2026-76461, affects Cisco AsyncOS software used by Cisco Secure Email Gateway appliances. CVE-2026-76461 is an SQL injection vulnerability, categorized under CWE-89. It could allow […]

The post CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.

Japan’s Digital Agency has confirmed a significant data breach affecting the Government Solution Service (GSS), a shared IT platform used across multiple ministries and government bodies, after attackers exploited a vulnerability in a VPN appliance to gain unauthorized access to internal servers. The agency disclosed on September 11 that approximately 246,000 personal records may have […]

The post Japan’s Digital Agency Breach Exposes 240,000+ Users’ Personal Records to Hackers appeared first on Cyber Security News.

Homebrew has released version 7.0.0, introducing a native vulnerability scanner, a Homebrew-specific advisory database, stronger sandboxing, and faster package installation workflows. The release also ends support for macOS Catalina 10.15 and moves Intel-based Macs to Tier 3 support. The most security-focused addition is the new brew vulns command. It allows users and security teams to scan installed […]

The post Homebrew 7.0.0 Adds Built-In Vulnerability Scanner and Stronger Package Sandboxing appeared first on Cyber Security News.

cPanel has issued an urgent security advisory warning that a critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privileged shared-hosting user to gain root-level access to an affected server. Administrators are urged to upgrade LiteSpeed Enterprise to version 6.3.7 or later immediately. The flaw affects LiteSpeed Web Server Enterprise versions earlier than 6.3.7. […]

The post cPanel LiteSpeed Web Server Vulnerability Allows Shared Server Users to Gain Root-Level Access appeared first on Cyber Security News.

Hackers are using a familiar Windows automation tool to hide AsyncRAT, a remote-access trojan, inside a trusted system process. The campaign starts with a deceptive batch file named “Right-click to open Invoice Details.bat,” which can appear harmless to someone expecting an invoice or shared document. Once opened, the file quietly launches PowerShell, rebuilds hidden code […]

The post Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process appeared first on Cyber Security News.

The Dutch National Cyber Security Center (NCSC) has issued an urgent warning over two critical vulnerabilities in Check Point VPN products, saying it expects large-scale exploitation attempts in the near term. Organizations using affected Check Point gateways, management systems, or Spark Firewall products should deploy the available fixes immediately. Tracked as CVE-2026-85102 and CVE-2026-85103, both […]

The post NCSC Warns of Critical Check Point VPN Flaws as Large-Scale Exploitation Is Expected appeared first on Cyber Security News.

This week’s roundup covers a massive Microsoft Patch Tuesday with two exploited zero-days, active FortiGate exploitation, a critical PAN-OS root-level RCE flaw, the Revolut KYC data breach, and more than 20 other stories spanning AI-driven cyberattacks, browser and firewall zero-days, and enterprise breach disclosures. Massive Microsoft Patch Tuesday September 2026 Microsoft’s September 2026 Patch Tuesday […]

The post Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories appeared first on Cyber Security News.

Dell Technologies released a security advisory about multiple vulnerabilities affecting Dell ObjectScale and Elastic Cloud Storage (ECS) deployments. Including a critical remote code execution flaw that could let an unauthenticated attacker compromise vulnerable systems. The advisory, tracked as DSA-2026-393, was published on September 10, 2026. The most severe issue is CVE-2026-70416, a critical untrusted-data deserialization […]

The post Critical Dell ObjectScale Vulnerabilities Allows Malicious Users to Compromise the Affected system appeared first on Cyber Security News.

Revolut has disclosed a data-security incident in which sensitive customer information was released after the financial technology company received a fraudulent request that appeared to originate from a legitimate government agency. The incident reportedly exposed highly sensitive Know Your Customer (KYC) documentation and detailed financial records belonging to a limited number of users, including passport […]

The post Revolut Data Breach Exposes Customers’ Passport Copies and Full Transaction Histories to Hackers appeared first on Cyber Security News.

A newly disclosed vulnerability in Plesk Backup Manager could allow low-privileged users to escalate privileges and gain full root access on affected Linux servers. Tracked as CVE-2026-68488, the flaw stems from a symlink race condition during subscription-content restore operations. The issue affects Plesk Obsidian installations running Plesk for Linux versions 18.0.80.6 and earlier, as well […]

The post Plesk Backup Manager Flaw Lets Low-Privileged Users Gain Root Access to Servers appeared first on Cyber Security News.

Two security vulnerabilities in VLC Media Player could allow attackers to corrupt heap memory or disclose sensitive data from a victim’s memory. The flaws, tracked as CVE-2026-56711 and CVE-2026-73324, affect VLC Media Player versions 3.0.0 through 3.0.23 and require a victim to open a specially crafted media file or playlist entry. Fabian Wahle of Hap […]

The post Multiple VLC Media Player Vulnerabilities Allow Attackers to Corrupt or Read Heap Memory appeared first on Cyber Security News.

A critical flaw in current security operations is assuming time is on our side. Historically, attacks progressed slowly, allowing analysts and response teams time to detect, discuss, and respond. Even severe incidents operated at a human pace. Our defenses have relied on human error, human speed, and human limitations. That era is over. AI-driven adversaries […]

The post Containing Machine Speed Cyber Attacks Inside AI Infrastructure appeared first on Cyber Security News.

A critical zero-day vulnerability in Oracle PeopleSoft exposed the Council of Europe and scores of other organizations to data theft and extortion in May and early June 2026. The ShinyHunters hacking group exploited the flaw across about 100 organizations and 300 instances worldwide, according to reports cited by The Register.  The attackers targeted the management and configuration layers of enterprise resource-planning systems, stealing sensitive records.  […]

The post Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks appeared first on Cyber Security News.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical GitLab vulnerability, tracked as CVE-2026-85706, to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting the flaw. The issue affects GitLab Community Edition and Enterprise Edition deployments and carries a maximum CVSS severity score of 10.0. CVE-2026-85706 is a path traversal […]

The post CISA Warns of GitLab Path Traversal Vulnerability Exploited in Attacks appeared first on Cyber Security News.