Posts of last few hours

The post Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution appeared first on Rhino Security Labs.

Hackers are advertising a new “uncensored” artificial intelligence service called Luciferus, positioning it as a subscription assistant willing to process malware-development requests that mainstream AI systems would reject. Sophos Counter Threat Unit (CTU) researchers discovered the offering on August 24, 2026, on the Exploit underground forum. It targets criminal customers seeking fewer technical and operational […]

The post Hackers Advertise Uncensored Luciferus AI Service on Underground Forums appeared first on Cyber Security News.

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting the flaw in real-world attacks. The issue, tracked as CVE-2026-76461, affects Cisco AsyncOS software used by Cisco Secure Email Gateway appliances. CVE-2026-76461 is an SQL injection vulnerability, categorized under CWE-89. It could allow […]

The post CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.

Japan’s Digital Agency has confirmed a significant data breach affecting the Government Solution Service (GSS), a shared IT platform used across multiple ministries and government bodies, after attackers exploited a vulnerability in a VPN appliance to gain unauthorized access to internal servers. The agency disclosed on September 11 that approximately 246,000 personal records may have […]

The post Japan’s Digital Agency Breach Exposes 240,000+ Users’ Personal Records to Hackers appeared first on Cyber Security News.

F5 has announced enhancements to F5 Distributed Cloud Bot Defense, introducing new device intelligence capabilities and specialized agentic AI protections. These capabilities bring persistent device context and continuous risk decisioning to application security, giving organizations the real-time agent management designed to help welcome trusted digital interaction while helping stop automated fraud and abuse. These updates arrive as AI agents emerge as a key channel for interacting with websites, mobile applications, and customer portals. Unlike basic … More →

The post F5 Bot Defense uses real-time risk scoring to detect fraud and abuse appeared first on Help Net Security.

Homebrew has released version 7.0.0, introducing a native vulnerability scanner, a Homebrew-specific advisory database, stronger sandboxing, and faster package installation workflows. The release also ends support for macOS Catalina 10.15 and moves Intel-based Macs to Tier 3 support. The most security-focused addition is the new brew vulns command. It allows users and security teams to scan installed […]

The post Homebrew 7.0.0 Adds Built-In Vulnerability Scanner and Stronger Package Sandboxing appeared first on Cyber Security News.

cPanel has issued an urgent security advisory warning that a critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privileged shared-hosting user to gain root-level access to an affected server. Administrators are urged to upgrade LiteSpeed Enterprise to version 6.3.7 or later immediately. The flaw affects LiteSpeed Web Server Enterprise versions earlier than 6.3.7. […]

The post cPanel LiteSpeed Web Server Vulnerability Allows Shared Server Users to Gain Root-Level Access appeared first on Cyber Security News.