⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article describes a cyberattack on Arizona's court system where hackers used a phishing email to steal backup files containing protective order and foster care records. Over 150,000 foster care reports were copied, but no evidence of juror or employee data compromise has been found.
Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504 , could allow a remote attacker with no login access to use the Manager's API as the admin user.
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms.
This week's ransomware and dark web report covers the arrest of a suspect in the ShinyHunters case, a data leak claim from a South Korean hospital by Ulose, and a Qilin ransomware attack on a Japanese logistics firm. These incidents reflect persistent cyber threats across multiple sectors.
Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities, owners, scoped permissions, and lifecycle controls.