https://cyber-osint.io/news/eviltokens-phaas-disrupted-after-compromising-12000-microsoft-accounts CyberOSINT en 2026-09-22 EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts https://cyber-osint.io/news/webinar-tomorrow-inside-real-world-google-workspace-breaches CyberOSINT en 2026-09-22 Webinar tomorrow: Inside real-world Google Workspace breaches https://cyber-osint.io/news/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers CyberOSINT en 2026-09-22 D-Link warns of max severity zero-day bug in DIR-822A routers https://cyber-osint.io/news/ai-agents-are-rewriting-the-rules-of-lateral-movement CyberOSINT en 2026-09-22 AI Agents Are Rewriting the Rules of Lateral Movement https://cyber-osint.io/news/new-cvss-100-velocloud-orchestrator-flaw-actively-exploited-in-certificate-based-setups CyberOSINT en 2026-09-22 New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups https://cyber-osint.io/news/more-than-a-third-of-industrial-orgs-see-cybersecurity-risk-as-a-top-obstacle-to-growth-study-finds CyberOSINT en 2026-09-22 More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds https://cyber-osint.io/news/dora-year-two-can-your-soc-actually-see-the-attack CyberOSINT en 2026-09-22 DORA Year Two: Can Your SOC Actually See the Attack? https://cyber-osint.io/news/new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory CyberOSINT en 2026-09-22 New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory https://cyber-osint.io/news/sharepoint-flaw-initially-listed-as-spoofing-by-microsoft-enables-authenticated-rce CyberOSINT en 2026-09-22 SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE https://cyber-osint.io/news/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates CyberOSINT en 2026-09-22 New Windows Defender zero-day blocks Microsoft antivirus updates https://cyber-osint.io/news/malicious-npm-package-indexed-btree-hid-its-loader-in-runtime-code-before-removal CyberOSINT en 2026-09-22 Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal https://cyber-osint.io/news/cisa-orders-feds-to-patch-zyxel-flaw-exploited-for-data-theft CyberOSINT en 2026-09-22 CISA orders feds to patch Zyxel flaw exploited for data theft https://cyber-osint.io/news/sidecopy-broadens-india-targeting-to-academia-with-reverserat-spear-phishing CyberOSINT en 2026-09-22 SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing https://cyber-osint.io/news/one-hidden-meta-muse-setting-could-let-attackers-turn-the-ai-assistant-into-a-backdoor CyberOSINT en 2026-09-22 One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor https://cyber-osint.io/news/wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss-into-rce-via-admin-session CyberOSINT en 2026-09-22 WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session https://cyber-osint.io/news/zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access CyberOSINT en 2026-09-22 Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access https://cyber-osint.io/news/how-ai-agents-can-trigger-runaway-costs-for-enterprises CyberOSINT en 2026-09-21 How AI Agents Can Trigger Runaway Costs for Enterprises https://cyber-osint.io/news/bigcommerce-alerts-merchants-of-data-breach-linked-to-ribon-apps CyberOSINT en 2026-09-21 BigCommerce alerts merchants of data breach linked to Ribon apps https://cyber-osint.io/news/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws CyberOSINT en 2026-09-21 CISA alerts of active exploitation of three Linux kernel flaws https://cyber-osint.io/news/shinyhunters-hacked-clop-now-what-about-clops-victims CyberOSINT en 2026-09-21 ShinyHunters Hacked Clop. Now What About Clop's Victims? https://cyber-osint.io/news/cybercriminals-are-hiding-new-malware-in-torrents-for-popular-films CyberOSINT en 2026-09-21 Cybercriminals Are Hiding New Malware in Torrents for Popular Films https://cyber-osint.io/news/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server CyberOSINT en 2026-09-21 WordPress Click2Shell flaw lets hackers execute PHP on the server https://cyber-osint.io/news/microsoft-to-retire-microsoft-365-companion-apps-in-december CyberOSINT en 2026-09-21 Microsoft to retire Microsoft 365 Companion apps in December https://cyber-osint.io/news/fake-lastpass-authenticator-installer-abuses-microsoft-signed-driver-to-kill-antivirus-and-edr CyberOSINT en 2026-09-21 Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR https://cyber-osint.io/news/contagious-interview-campaign-compromises-30000-devices-steals-1071m-in-crypto CyberOSINT en 2026-09-21 Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto https://cyber-osint.io/news/google-fined-403-million-over-gdpr-violations-tied-to-location-data CyberOSINT en 2026-09-21 Google Fined €403 Million Over GDPR Violations Tied to Location Data https://cyber-osint.io/news/google-fined-403-million-over-location-data-privacy-violations CyberOSINT en 2026-09-21 Google fined €403 million over location data privacy violations https://cyber-osint.io/news/rogue-behavior-openai-reveals-more-model-misalignment-incidents CyberOSINT en 2026-09-21 Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents https://cyber-osint.io/news/microsoft-fixes-broken-excel-copy-and-paste-for-all-office-users CyberOSINT en 2026-09-21 Microsoft fixes broken Excel copy and paste for all Office users https://cyber-osint.io/news/weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks CyberOSINT en 2026-09-21 ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks https://cyber-osint.io/news/taskstomp-powershell-backdoor-steals-documents-wi-fi-passwords-and-clipboard-data CyberOSINT en 2026-09-21 TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data https://cyber-osint.io/news/fbis-cjis-v61-what-security-teams-need-to-know CyberOSINT en 2026-09-21 FBI's CJIS v6.1: What Security Teams Need to Know. https://cyber-osint.io/news/microsoft-reminds-admins-to-migrate-entra-id-users-to-passkeys CyberOSINT en 2026-09-21 Microsoft reminds admins to migrate Entra ID users to passkeys https://cyber-osint.io/news/linkedin-wins-court-order-blocking-mass-scraping-of-user-data CyberOSINT en 2026-09-21 LinkedIn wins court order blocking mass scraping of user data https://cyber-osint.io/news/google-says-gemini-breached-three-companies-during-security-test CyberOSINT en 2026-09-21 Google says Gemini breached three companies during security test https://cyber-osint.io/news/microsoft-september-updates-break-file-history-backup-feature CyberOSINT en 2026-09-21 Microsoft: September updates break File History backup feature https://cyber-osint.io/news/shinyhunters-hacks-rival-extortion-gang-and-takes-over-its-dark-web-site CyberOSINT en 2026-09-21 ShinyHunters hacks rival extortion gang and takes over its dark web site https://cyber-osint.io/news/group-policy-hijacked-payload-ransomware-weaponizes-active-directory-gpo CyberOSINT en 2026-09-21 Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO https://cyber-osint.io/news/from-exposure-to-lockdown-how-aws-neutralizes-compromised-iam-credentials-through-managed-policies CyberOSINT en 2026-09-21 From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies https://cyber-osint.io/news/execution-runtime-security-in-the-era-of-agentic-ai CyberOSINT en 2026-09-21 Execution Runtime Security in the Era of Agentic AI https://cyber-osint.io/news/clickfix-lures-deploy-chainscript-rat-using-polygon-to-rotate-c2-infrastructure CyberOSINT en 2026-09-21 ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure https://cyber-osint.io/news/a-week-in-security-september-14-september-20 CyberOSINT en 2026-09-21 A week in security (September 14 – September 20) https://cyber-osint.io/news/jade-sleet-linked-to-indian-it-provider-breach-with-flatroof-and-roofdeck-backdoors CyberOSINT en 2026-09-21 Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors https://cyber-osint.io/news/russia-reports-thousands-of-cyberattacks-on-election-infrastructure-during-vote CyberOSINT en 2026-09-20 Russia reports thousands of cyberattacks on election infrastructure during vote