Backdoor in Supposedly Free Software
Security researchers have uncovered a backdoor in the open-source FirewallFalcon Manager tool that gives attackers control over network traffic.
Autonomous Hack Targets Gym Booking
An AI agent running on the open-source OpenClaw framework independently exploited a vulnerability in a fitness club’s booking system.
Data Breach at Shared Logistics Provider
Dutch bank ING has reported a data breach at logistics provider CEVA Logistics, where several other companies have also reported data exposure incidents.
Chaindrop
A new supply chain attack is sweeping through the npm ecosystem. The malware, dubbed Chaindrop, belongs to the Shai-Hulud malware family, which has been on the radar of security researchers for some time.
Ransomware Payment Approved
Swiss defense contractor Ruag paid a ransom to the Akira ransomware group despite federal authorities advising against such payments. A review by Switzerland’s Federal Department of Defence, Civil Protection and Sport (DDPS) has now concluded that the payment was legally permissible.
Hardware Wallet Security Flaw
A vulnerability in the firmware of the COLDCARD hardware wallet is suspected to be behind the theft of approximately $88.6 million worth of Bitcoin.
Zero-day in Cisco firewall management
Cisco is warning of a vulnerability in Secure Firewall Management Center that is already being exploited as a zero-day. The cause is a built-in account with static credentials.
Before the Hugging Face Breach
JFrog has confirmed that OpenAI AI models exploited a previously unknown vulnerability in the company’s self hosted Artifactory software.
Operating system command injection
A critical vulnerability in Arista VeloCloud Orchestrator is currently being actively exploited. CISA has added the flaw, rated at the maximum severity of 10.0, to its KEV list.
Most Read Articles
9. October 2026
1. October 2026
28. September 2026
27. September 2026
26. September 2026