Threat Wire
BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys

CyberWatch Newsroom Live Intel

Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.

Last Checked: Nov 2, 2026 - 02:28:59 UTC (Hourly Auto-Sync Active)
Newsfeed (/feed) RSS Feed JSON API
All Security Bulletins 5,807 Active Zero-Days (KEV) 608 Microsoft Patch KBs 849 MSRC Live Wire 1,922 CISA Advisories 157 Threat Intel 2,629
Showing 24 of 2,629 advisories
Page 100 of 110
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key Moderate The Hacker News
2026-09-10 The Hacker News

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway's administrator credential. Anyone who hold…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 Moderate The Hacker News
2026-09-10 The Hacker News

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents. The AI company said the incident dates back to January 2026 and involved an early version of Cla…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
EU Cyber Resilience Act to Enforce New Reporting Requirements Critical Dark Reading
2026-09-10 Dark Reading

EU Cyber Resilience Act to Enforce New Reporting Requirements

Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Infosec
Advisory
Smashing Security podcast #484: How websites are tracking you with silence Moderate Graham Cluley Security
2026-09-09 Graham Cluley Security

Smashing Security podcast #484: How websites are tracking you with silence

When a chap called Matt noticed his Bluetooth headphones wouldn't switch to his phone, he was surprised to realise the reason was a single AliExpress webpage sitting open in his browser - playing nothing at all, at zero volume. And yet somehow his hardware could hear it. Audio fingerprinting is one of the sneakiest tracking tricks on the web. Meanwhile, the …

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Infosec Commentary & Leaks
Advisory
Mythos Vulnerability Firehose Hits a Human Bottleneck Important Dark Reading
2026-09-09 Dark Reading

Mythos Vulnerability Firehose Hits a Human Bottleneck

An analysis of Project Glasswing findings shows only a fraction of the bugs it has discovered have reached disclosure, and an even smaller number have been fixed.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Infosec
Advisory
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto Moderate The Hacker News
2026-09-09 The Hacker News

U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto

The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and deploying the Scam Center Strike Force to Madagascar to help disrupt 13 scam compoun…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Scans for Proxmox Servers, (Wed, Sep 9th) Moderate SANS Internet Storm Center
2026-09-09 SANS Internet Storm Center

Scans for Proxmox Servers, (Wed, Sep 9th)

About a week ago, Proxmox published an advisory revealing a vulnerability in older versions of Proxmox VE, its flagship Virtual Environment product. The vulnerability only affects version 7, which has not been supported for a couple of years now.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week Important The Hacker News
2026-09-09 The Hacker News

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, …

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities Important CVE-2026-20079 Cisco Talos Intelligence
2026-09-09 Cisco Talos Intelligence

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco’s Secure FMC Software, which allows an unauthenticated, remote attacker to bypass authentications and execute scripts on impacted …

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Global Telemetry & Research
Advisory
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it Moderate Rapid7 Threat Research
2026-09-09 Rapid7 Threat Research

Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

If your scan engine already holds credentials for a host, it can ask that host which ports are open instead of probing for them. Every scan begins with the same question: which ports on this host are open? Everything after it, from identifying services to checking for vulnerabilities to evaluating policy, depends on the answer being right. The traditional an…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Metasploit & Exploit Research
Advisory
More than 100,000 fake stores are out to steal your card details Moderate Malwarebytes Labs
2026-09-09 Malwarebytes Labs

More than 100,000 fake stores are out to steal your card details

Researchers at German cybersecurity company Nebty have identified “DoppelCart,” a cluster of almost 119,000 domains linked to copied online stores. The researchers describe it as the largest publicly documented fake-shop network by associated domain count. They found 118,787 .shop domains in the cluster, representing 2.72% of the .shop top-level domain (TLD)…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Malware Outbreaks & Analysis
Advisory
The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords Critical Qualys Security Blog
2026-09-09 Qualys Security Blog

The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords

The question of whether a Frontier AI model could find vulnerabilities that no human researcher had found was settled in April. Claude Mythos Preview identified thousands of previously unknown flaws across every major operating system and browser, including a 27-year-old denial-of-service condition in OpenBSD, and within a month Anthropic and its Project Gla…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Vulnerability Research & Audits
Advisory
Identity-Based AI Attack Threatens Security of Enterprise Data Important Dark Reading
2026-09-09 Dark Reading

Identity-Based AI Attack Threatens Security of Enterprise Data

"Workflow identity hijacking" can bypass standard security controls and hijack an organization's data by sending a basic request through an unauthenticated entry point.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Infosec
Advisory
Gigabud Uses Android App Cloning to Evade Fraud Detection Moderate Infosecurity Magazine
2026-09-09 Infosecurity Magazine

Gigabud Uses Android App Cloning to Evade Fraud Detection

Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Global Cybersecurity News
Advisory
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA Important The Hacker News
2026-09-09 The Hacker News

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include creden…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
ClickFix Moves into the Browser to Steal Cryptocurrency Moderate Infosecurity Magazine
2026-09-09 Infosecurity Magazine

ClickFix Moves into the Browser to Steal Cryptocurrency

ClickFix campaign uses browser-injected JavaScript and Google Sheets to steal cryptocurrency

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Global Cybersecurity News
Advisory
Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE Moderate The Hacker News
2026-09-09 The Hacker News

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? For many security teams, answering that means jumping between vulnerability scanners, endpoint tools, cloud inventories, SBOMs, repositories, and application data to build enough context to act. As AI accelerates vulnerability discovery a…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Microsoft fixes record 964 flaws, including 2 exploited zero-days Critical CVE-2026-81963 Malwarebytes Labs
2026-09-09 Malwarebytes Labs

Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involve fixes that Microsoft applies itself, leaving 964 vulnerabilit…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Malware Outbreaks & Analysis
Advisory
Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure Moderate Palo Alto Unit 42
2026-09-09 Palo Alto Unit 42

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks. The post Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure appeared first on Unit 42 .

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
APT Threat Hunting
Advisory
CRPx0 ransomware: what you need to know Critical Graham Cluley Security
2026-09-09 Graham Cluley Security

CRPx0 ransomware: what you need to know

CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business. Read more in my article on the Fortra blog.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Infosec Commentary & Leaks
Advisory
1 ... 98 99 100 101 102 ... 110
Notification