Enterprise e-commerce platform BigCommerce fell victim to a supply chain attack that resulted in the theft of customer data. BigCommerce is a SaaS provider that enables merchants to build and manage online stores. It hosts the stores, provides backend tools and takes care of server security. Late last week, the company began notifying retailers that … Read more
D-Link warned customers about a maximum severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch affecting older DIR-822A dual-band Wi-Fi routers. This vulnerability is due to a stack-based buffer overflow and improper data processing in the DHCP server component and can be exploited without authentication or user interaction. Attackers without valid credentials … Read more
Treasury Secretary Scott Bessent said on Sunday the US has proposed a new “notification mechanism” for artificial intelligence incidents that could impact national security. This was part of weekend discussions ahead of talks between President Donald Trump and China’s Xi Jinping at the White House this week. “We want a common vision of common goals … Read more
E-commerce platform BigCommerce has alerted several retailers to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. The cloud-based Software-as-a-Service (SaaS) e-commerce platform confirmed the credentials compromise on September 17 and immediately removed the apps to protect its customers. UK-based online spirits retailer Master … Read more
Google has been fined 403 million euros ($463 million) for violating the European Union’s strict data protection rules by improperly processing users’ location data, the bloc’s data protection regulator said on Monday. The Irish Data Protection Commission said its investigation found that Google did not lawfully or fairly process location data in users’ web and … Read more
Microsoft warned that Windows’ built-in file history backup feature may stop working on some systems after installing the September 2026 security updates. File History (introduced under Windows 8 and replaced by Windows Backup, which backs up data to OneDrive) automatically saves copies that allow users to restore accidentally deleted or corrupted files with an older … Read more
NightmareStresser, one of the world’s longest-running distributed denial of service (DDoS) services, has been disrupted. The US Department of Justice announced this week that the FBI had seized the Internet domains associated with the booter service. visitors too nightmare-stresser(.)com And nightmaresresser(.)org Now you will be served with a confiscation banner. Authorities said NightmareStresser has been … Read more
An ongoing NPM malware campaign using the indexed-btree package shows how threat actors are evading supply chain defenses by hiding malicious code in the normal runtime behavior of a package rather than in installation scripts. The package discovered by Checkmarx researchers attempts to mimic the legitimate sorted-btree library and has already been downloaded 2 million … Read more
Microsoft on Thursday released patches for 18 vulnerabilities spanning its Azure cloud portfolio and Copilot-branded AI products. Elevation of privilege errors accounted for the majority of disclosures and affected Azure ARC, Azure AI Foundry, Azure Logic Apps, Azure Billing, Azure HorizonDB, Azure Cosmos DB, Azure Container Registry, Microsoft Fabric, Microsoft Dataverse, and Microsoft 365 Copilot. … Read more
A joint law enforcement agency warns that North Korean hacker group WaterPlum compromised at least 30,000 devices worldwide and transferred more than $10.7 million in stolen cryptocurrency to North Korea from December 2025 to July 2026. The figures come from a joint consultation by Japanese, US, AustralianAnd German Authorities that jointly tracked the threat group’s … Read more