ShinyHunters Hacks Clop Leak Site, Threatens to Extort Ransomware Gang 2026-09-19 True True Researchers Use AI to Find Widespread Software Decoder Flaw 2026-09-19 True True New Check Point Flaw Lets Hackers Execute Code With Root Privileges 2026-09-19 True True Early Scattered Spider Member Pleads Guilty to Cybercrime Spree 2026-09-19 True True CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories 2026-09-19 True True CVE-2026-77929: Authenticated File Upload Leads to Remote Code Execution in ClipBucket v5 2026-09-19 True True CVE-2026-13684: Improper Output Encoding in Synology DSM SCGI Enables Unauthenticated File Read/Write 2026-09-19 True True CVE-2026-13639: Insufficient Entropy in Synology DSM Login Lets Unauthenticated Attackers Read/Write Files 2026-09-19 True True SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE 2026-09-19 True True FBI Warns of North Korean 'WaterPlum' Campaign Infecting Devices Across 100 Countries 2026-09-18 True True Critical Unauthenticated RCE in HGiga OAKlouds via Insecure Deserialization (CVE-2026-93467) 2026-09-18 True True Critical RCE in AF Companion WordPress Plugin (CVE-2026-84738) 2026-09-18 True True CVE-2026-54460: OpenReception Unauthenticated Passkey Injection 2026-09-18 True True CVE-2026-45140: Chamilo LMS Unauthenticated Remote Code Execution 2026-09-18 True True Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repos for C2 2026-09-18 True True CVE-2026-66269: Dell OpenManage Server Administrator Unsafe Reflection Flaw 2026-09-18 True True WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage 2026-09-18 True True ISC Patches 14 Vulnerabilities in BIND 9 DNS Server Software 2026-09-18 True True Critical Check Point Flaw Lets Unauthenticated Attackers Run Code as Root 2026-09-18 True True Spain's AEPD Logs First Data Breach Attributed to an Autonomous AI Agent 2026-09-18 True True Brevo Supply Chain Attack Injects Malware Into 100,000 Websites 2026-09-18 True True New WordPress 'Click2Shell' Flaw Forces Theme Installs, Can Chain to Code Execution 2026-09-18 True True Microsoft Fixes Broken Copy-and-Paste for Excel 2016 Users 2026-09-18 True True Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day 2026-09-17 True True Microsoft Shares Workaround for Windows Domain Login Issues 2026-09-17 True True Pixel Modem Zero-Day Exploited in Targeted Attacks 2026-09-17 True True CVE-2026-58704: Google Pixel Improper Authorization Vulnerability 2026-09-17 True True BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS 2026-09-17 True True Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone 2026-09-17 True True China's FamousSparrow APT Deploys New SparroWocky Backdoor Across Latin America 2026-09-17 True True Cisco Patches 44 Vulnerabilities Across FMC, ISE, and Nexus Dashboard 2026-09-17 True True Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks 2026-09-17 True True Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records 2026-09-17 True True Hackers Claim Breach of Russian Election Systems Days Before Parliamentary Vote 2026-09-17 True True New RatHat Android Malware Uses AI to Automate Device Control 2026-09-17 True True Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows 2026-09-17 True True Revolut Breach Ran 5 Months, Hit 680 High-Profile Accounts, Now Draws $3M Ransom Demand 2026-09-17 True True CVE-2025-56563: Server-Side Request Forgery in Zenith Satellite Tracker 2026-09-17 True True CVE-2026-20284: SQL Injection in Cisco ISE SXP REST API 2026-09-17 True True CVE-2026-39919: Ghostscript JPEG 2000 Heap Buffer Overflow 2026-09-16 True True CVE-2026-55158: Conflibot Command Injection via Pull Request Branch Name 2026-09-16 True True Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover 2026-09-16 True True Malicious Admin Menu Editor Pro Plugin Backdoors 1,500 WordPress Sites 2026-09-16 True True EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media 2026-09-16 True True Cisco Warns Customers of Actively Exploited Zero-Day in Email Gateways 2026-09-16 True True NightEagle and Toy Ghouls Join Hacking Cat in Hitting Russian Firms 2026-09-16 True True Spain's Data Agency Gets First Report of AI-Powered Data Breach 2026-09-16 True True Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution 2026-09-16 True True Digital Watchdog VMAX Root FTP Credentials Baked In 2026-09-16 True True Digital Watchdog VMAX DVR/NVR Missing Authorization Enables Takeover 2026-09-16 True True 
