Cybersecurity

In other news: $15,000 iCloud spoofing bugs, AI policy experts phishing, Adblocker spies on AI chats

by
In other news: ,000 iCloud spoofing bugs, AI policy experts phishing, Adblocker spies on AI chats

Weekly from SecurityWeek Cybersecurity News Summary provides a succinct overview of key developments that may not be covered entirely in isolation but are nonetheless relevant to the broader threat landscape. This curated summary highlights key stories about vulnerability disclosures, new attack vectors, policy updates, industry reports and other notable events to help readers stay well-informed … Read more

The US imposes sanctions on members of the Tren de Aragua gang for raiding ATM hacks

by
The US imposes sanctions on members of the Tren de Aragua gang for raiding ATM hacks

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in stealing millions of dollars in jackpot attacks on ATMs in the United States. In jackpot attacks, criminals use malware (e.g. ATMii, ATMitch, GreenDispenserAlice, RIPPER, dusk, SUCCESSFULand Ploutus) at bank and credit union automated teller machines … Read more

Warlock expands SharePoint exploitation in attacks on critical infrastructure

by
Warlock expands SharePoint exploitation in attacks on critical infrastructure

The Warlock ransomware group continues to target SharePoint servers in attacks on critical infrastructure, government and educational institutions, Symantec reports. Warlock is believed to be operated by a China-based hacking group called Longlegs and Storm-2603, which has been linked to malicious operations such as CL-CRI-1040, CamoFei and ChamelGang. Last year, Chinese state-sponsored groups Linen Typhoon … Read more

Fortinet warns of critical FortiMail vulnerability exploited in zero-day attacks

by
Fortinet warns of critical FortiMail vulnerability exploited in zero-day attacks

Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more

Zero Trust Creator says the model is resilient to AI-powered attacks

by
Zero Trust Creator says the model is resilient to AI-powered attacks

Is Zero Trust Still Effective in the AI ​​Age? A new book by John Kindervag says yes, but that requires correct implementation. John Kindervag introduced the concept of Zero Trust in a Forrester Research report titled No more tough centers: introducing the zero trust model of information security published in 2010. Since then, the concept … Read more

The police dismantle the KillSec ransomware gang, which was allegedly led by a 16-year-old

by
The police dismantle the KillSec ransomware gang, which was allegedly led by a 16-year-old

An international law enforcement operation dubbed “Operation KillSwitch” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests and identified a 16-year-old as the group’s suspected administrator. The coordinated law enforcement operation was carried out on September 30, involving authorities from Belgium, the United States, Finland, Germany, Greece, the Netherlands, Romania, … Read more

Cisco fixes exploited zero-day vulnerability in Catalyst SD-WAN

by
Cisco fixes exploited zero-day vulnerability in Catalyst SD-WAN

Cisco on Wednesday deployed urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager that has been exploited in the wild. The flaw, tracked as CVE-2026-76504 (CVSS score 9.8), impacts the session-based API authentication mechanism and could allow remote, unauthenticated attackers to gain administrative access to a vulnerable system. “In September 2026, the Cisco … Read more

Russian state hackers are using the new RedFlick technology to spread malware

by
Russian state hackers are using the new RedFlick technology to spread malware

Russian state actor Star Blizzard is using a new malware installation tactic called “RedFlick” to deploy its signature CosmicPulse backdoor. While the tactic is not a new cybersecurity technique, it is a new delivery approach for the threat actor, allowing them to further automate attacks and reduce interaction with victims. Microsoft researchers say that in … Read more

Google: AI is changing the pace and profile of vulnerability detection

by
Google: AI is changing the pace and profile of vulnerability detection

According to a new report from Google Threat Intelligence Group (GTIG), the number of vulnerabilities disclosed each month doubled in 2026, and the monthly average of vulnerabilities exploited in the wild nearly doubled. Analyzing disclosures from January 2025 to August 2026, GTIG found that monthly disclosures increased from 5,045 in January 2026 to 10,477 in … Read more

Cisco warns of new SD-WAN zero-day attacks

by
Cisco warns of new SD-WAN zero-day attacks

Cisco has released security updates to address a critical zero-day in Catalyst SD-WAN Manager (tracked as). CVE-2026-76504), which attackers actively exploit to gain administrator rights. Catalyst SD-WAN Manager, formerly known as SD-WAN vManage, is network management software that allows administrators to monitor and manage up to 6,000 SD-WAN devices from a single dashboard. “In September … Read more