Cisco users urged to patch email gateway flaw
Cisco is urging defenders to get out in front of a highly-dangerous flaw in its Secure Email Gateway (SEG) appliance, CVE-2026-76461 that could enable an…
Latest Cybersecurity News — Page 65
View all →CHOSEN BRICK: Iran’s Spyware Campaign Against Its Critics
The file looked like an MRI scan. Lumbar spine, several grey slices of vertebrae, a heading reading something like ‘Disk Herniation and Degeneration.’ For a…
Cleanaway is modernising its network connecting 350 sites
Key points Cleanaway Waste Management is deploying an SD-WAN using Netskope technology, with Macquarie Technology Group overseeing delivery, due to complete by April next year.…
“We Think the Security Control Is Working” Is No Longer Good Enough
Security, risk, and control assessments are typically done for the sake of compliance: tools deployed, audits passed, workflows completed, boxes checked. That’s no longer enough…
One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire
One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire Pierluigi Paganini September 15, 2026 Two China-linked groups ran identical Chrome/Windows zero-day exploits against…
Hundreds of OpenAI agents attack RubyGems platform
“Once the AIs got arbitrary RCE on the build environment, they would sometimes use the build environment to attempt to steal other users’ API keys,…
AWS STS simplifies session token size limits and adds session token size monitoring
AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has…
Getting gooey with GULOADER: deobfuscating the downloader
Overview Elastic Security Labs continues to monitor active threats such as GULOADER, also known as CloudEyE – an evasive shellcode downloader that has been highly…
Acronis warns of actively exploited flaw in its cPanel backup plugin
Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in…
Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Vision Pro,…
Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors
Threat actors are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin that lets unauthenticated attackers upload malicious PHP files and potentially…
Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)
Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed on Monday. The vendor’s Product Security Incident…