Public Exploit Code in Circulation
Cisco is warning about seven ClamAV vulnerabilities affecting its Secure Endpoint Connector products. Exploit code is already publicly available for two of the flaws.
Supply Chain Attack
Compromised LiteLLM versions uploaded to PyPI stole credentials and access tokens. CloudSEK has identified more than 2,500 potentially affected organizations linked to the TeamPCP campaign.
Microsoft Patch Tuesday August 2026
Microsoft has patched hundreds of vulnerabilities as part of its August Patch Tuesday release. One of the flaws was already being exploited as a zero-day by the Lazarus Group.
First Fully Autonomous Cyberattack on a Government
Suspected Chinese hackers targeted Taiwan in what Dream describes as a largely autonomous AI powered cyberattack.
Backdoor in Supposedly Free Software
Security researchers have uncovered a backdoor in the open-source FirewallFalcon Manager tool that gives attackers control over network traffic.
Autonomous Hack Targets Gym Booking
An AI agent running on the open-source OpenClaw framework independently exploited a vulnerability in a fitness club’s booking system.
Data Breach at Shared Logistics Provider
Dutch bank ING has reported a data breach at logistics provider CEVA Logistics, where several other companies have also reported data exposure incidents.
Master key to the entire cloud database
A vulnerability chain in Azure Cosmos DB could have given attackers read and write access to databases of the cloud service.
Chaindrop
A new supply chain attack is sweeping through the npm ecosystem. The malware, dubbed Chaindrop, belongs to the Shai-Hulud malware family, which has been on the radar of security researchers for some time.
Most Read Articles
9. October 2026
1. October 2026
28. September 2026
27. September 2026
26. September 2026