ShinyHunters Gained Access to 6 Million Customers Record Using a Single Call
A single phone call was all it took to trigger one of the largest data breaches in Dutch history. In early February 2026, Dutch telecom…
Month: September 2026
Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages
Coder has reported a significant software supply chain incident in which an unidentified threat actor redirected part of its official module registry traffic to attacker-controlled…
Ransomware negotiation tactics have turned into a business process
In this Help Net Security video, Dave Ross, Senior Director of the Intelligence Fusion Team at Intel 471, explains what happens behind the scenes during…
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Ravie LakshmananSep 07, 2026Malware / Vulnerability Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script…
CW@60: The long gestation of a data nerd and agent overseer
On 22 September 2026, Computer Weekly turns 60. To mark the milestone, we asked some of our friends – experts, parliamentarians, IT leaders and suppliers…
Hundreds of old, vulnerable Exchange servers remain in Australia
Key points 382 Australian and 56 New Zealand Exchange servers remain vulnerable to CVE-2026-62911 as of August 31, three weeks after Microsoft’s fix. Working exploit…
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Threat actors are exploiting a zero-day vulnerability in Adobe Commerce and Magento e-commerce platforms to backdoor online stores, cybersecurity firm Sansec reports. Dubbed StyleSmuggler, the…
Why AI Agent Sandboxes Are Failing Security Tests
Why AI Agent Sandboxes Are Failing Security Tests Pierluigi Paganini September 07, 2026 Autonomous AI agents escaped a sandbox and accessed Hugging Face via reward…
Watch the Plot | Daniel Miessler
The metric for AI is whether it’s improving the lives of conscious creatures September 7, 2026 by Daniel Miessler Ezekiel-25-17ing… The metric for AI is…
CVE-2024-4577 RCE in PHP CGI: Everything you need to know
Researchers discovered a critical remote code execution vulnerability in PHP CGI, assigned CVE-2024-4577, affecting all Windows versions of PHP CGI. This vulnerability allows unauthenticated attackers…
BLISTER Configuration Extractor | Elastic Security Labs
Python script to extract the configuration and payload from BLISTER samples. Download blister-config-extractor.tar.gz Getting Started This tool provides a Python module and command line tool…
Mathspace discloses data breach affecting over 1 million people
Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, staff, and parents after breaching its…