ShinyHunters Suspect Reportedly Detained in Jordan, Aiding FBI
A suspected ShinyHunters member was reportedly detained in Jordan and is aiding the FBI, as investigators pursue the group behind data theft and extortion.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
A suspected ShinyHunters member was reportedly detained in Jordan and is aiding the FBI, as investigators pursue the group behind data theft and extortion.
Read more →
GitLab fixes CVE-2026-90970, a critical AI Gateway flaw enabling command execution. Self-hosted users must patch; GitLab-hosted gateways are already protected.
Read more →
Fortinet says attackers are exploiting critical FortiMail flaw CVE-2026-104286. Affected organizations should restrict management access and review indicators.
Read more →
Cisco says attackers are exploiting CVE-2026-76504 to gain admin API access to SD-WAN Manager. Fixed releases are available; exposed systems need review.
Read more →
Microsoft says Star Blizzard used RedFlick phishing to affect over 100 organizations, with protected archives, scheduled tasks and the CosmicPulse backdoor.
Read more →
Microsoft linked JadePuffer to an Azure attack that deleted cloud storage accounts through compromised service principals and targeted recovery controls.
Read more →
Citrix patched two actively exploited NetScaler remote code execution flaws. CISA reports attacks worldwide and urges checks for compromise before updates.
Read more →
ShinyHunters are bypassing WAF rules to exploit unpatched Oracle PeopleSoft servers. Mandiant found web shells on dozens of systems across multiple sectors.
Read more →
CISA lists exploited flaws in SharePoint, RouterOS, WSO2 and Adobe Commerce, with federal remediation deadlines on September 27 and 28 for affected agencies.
Read more →
CISA now lists TeamCity CVE-2026-63077 as used in ransomware campaigns. JetBrains urges on-premises users to apply fixes and review exposed build servers.
Read more →