Adobe Commerce max-severity bug comes under active attack
Adobe has released an emergency hotfix, VULN-393411, for the vulnerability. But because attackers had three days to exploit the flaw before a fix arrived, Sansec…
Month: September 2026
SANS Institute signs German government cybersecurity training deal to strengthen national cyber resilience
As European governments boost cybersecurity workforce investment amid escalating threats and a deepening talent shortage, SANS Institute and the German Federal Office of Bundeswehr Equipment,…
Wiz achieves StateRAMP authorization | Wiz Blog
Continuing our commitment to helping public sector customers secure their cloud, we are excited to announce our StateRAMP authorization, in addition to being under FedRAMP…
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)
Overview While conducting research into a recent N-able N-central authentication bypass vulnerability (CVE-2026-18577), Rapid7 Labs discovered two new vulnerabilities affecting the latest version of N-central.…
Hackers build AI frameworks for widescale credential theft
Threat actors are increasingly switching from AI-powered coding assistants to multi-agent frameworks that automate every stage of an attack. Drawing on telemetry from Mandiant’s incident…
Hackers Disable Endpoint Protection and Deploy Sliver Across Compromised Windows Domain
A new intrusion campaign shows how quickly a Windows domain can be turned into a launchpad for deeper compromise. The operators used a Sliver command-and-control…
Meta Failed to Catch Hundreds of AI Child Abuse Ads. Some Included Images of Real Kids
The ads pointed people towards almost 50 apps combined across Google’s Play Store and Apple’s App Store. Of the 350 ads, the researchers say that…
Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access
Dell has released security updates for the Secure Connect Gateway (SCG) Application and Appliance after discovering three critical vulnerabilities. These flaws can expose enterprise deployments…
Trezor customers hit with phishing calls and letters after shipping-partner breach
Roughly 67,000 more customers of SatoshiLabs, the maker of hardware crypto-wallet Trezor, are at heightened risk of phishing attacks after their names, email addresses, phone…
MikroTik router flaws allow takeover without a password
CERT Polska warns that attackers are actively exploiting a chain of critical MikroTik RouterOS flaws to seize control of routers exposed to the internet. Although…
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Ravie LakshmananSep 08, 2026Vulnerability / Web Security Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has…
Live Facial Recognition: The Poster Boy of Biometric Surveillance
It is often said that ‘a week is a long time in politics’ and hardly a week goes by without a media report on facial…