VMware vCenter Vulnerability Now Actively Exploited by Ransomware Gangs, CISA Warns

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a grave alert, confirming that sophisticated ransomware operations are now actively exploiting a critical vulnerability within VMware’s vCenter Server, a…

Japan’s Digital Agency Reports Data Breach Exposing 246,000 Government Personnel Records Due to VPN Vulnerability

Japan’s Digital Agency has disclosed a significant data breach that may have compromised approximately 246,000 rows of personal information belonging to government employees and associated individuals. The breach, which came…

Microsoft Issues Emergency Patches to Rectify Critical September Update Failures Affecting Remote Desktop Services, Hyper-V, and Audio Functionality

Microsoft has been compelled to release urgent out-of-band updates to address a cascade of critical issues stemming from its September 2026 security updates. These patches aim to resolve widespread failures…

HBO Max Reddit Account Hijacked to Distribute Malware Via Malicious Ads

In a sophisticated cyberattack that underscores the evolving tactics of threat actors, hackers successfully compromised the official HBO Max Reddit account, weaponizing it to disseminate malicious advertisements. These ads, disguised…

Hackers Exploit Tencent App Flaw to Deploy GrayRabbit Malware

A critical vulnerability within Tencent’s widely used Sogou Input Method for Windows has been actively exploited by a China-aligned espionage group, enabling the deployment of the sophisticated GrayRabbit backdoor. Cybersecurity…

Microsoft Teams and Outlook Launch Issues on ARM Devices Resolved by September Patch Tuesday Updates

Microsoft has successfully addressed a critical bug that was preventing users of its productivity suite, specifically Microsoft Teams and the new Outlook for Windows, from launching on ARM-based Windows devices.…

AI Platforms Become New Vector for Cyberattacks, Exploiting User Trust Through Malicious Content

As artificial intelligence platforms become increasingly integrated into daily professional workflows, a concerning new avenue for cyberattacks has emerged: the AI platforms themselves. Security researchers at Huntress Security Operations Center…

Artifactory Flaws Chained in Attacks Deploying Backdoor Malware

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted servers. A new report from…

Dutch NCSC Issues Urgent Warning: Imminent Exploitation of Critical Check Point VPN Flaws Expected

The Dutch National Cyber Security Centre (NCSC) has issued a grave warning regarding the imminent exploitation of two critical vulnerabilities within Check Point VPN solutions, identified as CVE-2026-85102 and CVE-2026-85103.…

Microsoft 365 Accounts Targeted by Sophisticated Passkey and SSO Social Engineering Attacks

Microsoft is alerting organizations to a surge in highly targeted social engineering campaigns, primarily by threat actors linked to the ShinyHunters and Helix extortion gangs, that are exploiting passkey and…