AI Agents Compromised 440 PaperCut Servers, Researchers Say
A threat intelligence firm says it watched a Russian-speaking attacker turn hundreds of AI agents loose on a print management platform and compromise 440 servers…
Category: DarkReading
Microsoft Patch Tuesday September 2026 Fixes 974 CVEs
Microsoft’s Patch Tuesday September 2026 rollout has broken previous records, with the company addressing 974 CVEs across its product lineup in a single release. Two…
Attackers Exploited MikroTik RouterOS Flaws
Attackers began compromising internet-exposed MikroTik routers on Sept. 2, a day before the Latvian vendor released fixes and three days before national authorities published the…
Mathspace Data Breach Affects 1.07M Users: What Happened
The Mathspace data breach has affected 1,079,819 people in Australia and New Zealand after unauthorized parties accessed an internal reporting system and downloaded user information.…
Pegasus, New NoviSpy Variant Found On Serbian Students
At least 14 people connected to Serbia’s student protest movement and opposition politics have been targeted with mercenary spyware since early 2026, the Belgrade-based digital…
The Cyber Express Weekly Roundup: Claude, PaperCut & Citrix
This weekly roundup highlights a range of cybersecurity developments affecting artificial intelligence platforms, enterprise software, healthcare organizations, social media accounts, and internet-facing infrastructure. From stolen…
Citrix NetScaler Vulnerabilities Prompt Patch Warning
Two Citrix NetScaler vulnerabilities affecting Citrix NetScaler Application Delivery Controller (ADC) and Citrix NetScaler Gateway products have prompted a patching warning for Australian organisations. The…
SonicWall Warns Of Two Actively Exploited SMA1000 Zero-Days
SonicWall disclosed this week that attackers are chaining two previously unknown vulnerabilities in its SMA1000 secure access appliances to run commands on unpatched devices, and…
Cyberattack On X Users Prompts DOJ Investigation
A cyberattack on X users that targeted hundreds of thousands of accounts has prompted an investigation by the US Department of Justice (DOJ), with Attorney…
The Breakdown Of AshSqlite Vulnerability CVE-2026-77846
CVE-2026-77846, a newly disclosed AshSqlite vulnerability, can allow attackers to access hidden or sensitive fields stored inside JSON and map columns when applications pass untrusted…
PaperCut Issues Second Emergency Patch As Researchers Break Fix For Exploited Zero-Days
PaperCut released a second emergency patch last Friday, for two vulnerabilities in its NG and MF print management servers that attackers are already exploiting, after…
UK Ukraine AI Partnership Opens Avengers AI Labs Access
The UK Ukraine AI partnership will give Britain access to Ukraine’s Avengers AI Labs, bringing together Ukrainian battlefield experience, operational data and engineering expertise with…