Threat Wire
BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys

CyberWatch Newsroom Live Intel

Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.

Last Checked: Nov 2, 2026 - 02:28:59 UTC (Hourly Auto-Sync Active)
Newsfeed (/feed) RSS Feed JSON API
All Security Bulletins 5,807 Active Zero-Days (KEV) 608 Microsoft Patch KBs 849 MSRC Live Wire 1,922 CISA Advisories 157 Threat Intel 2,629
Showing 24 of 2,629 advisories
Page 62 of 110
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor Important The Hacker News
2026-09-29 The Hacker News

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft. The campaigns, aimed at people and organizations tied to Ukraine, have affected more than 100 organizations since January, mostly in the U.S. and U.K. At least one computer was infe…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Automated AI agent used to breach cybersecurity nonprofit DIVD Critical BleepingComputer
2026-09-29 BleepingComputer

Automated AI agent used to breach cybersecurity nonprofit DIVD

The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Cyber Defense & Malware
Advisory
'NeedyMantis' Provides Long-Term Access to Compromised Networks Moderate Dark Reading
2026-09-29 Dark Reading

'NeedyMantis' Provides Long-Term Access to Compromised Networks

Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Infosec
Advisory
Autonomous Remediation Is Already Running at Enterprise Scale Moderate Qualys Security Blog
2026-09-29 Qualys Security Blog

Autonomous Remediation Is Already Running at Enterprise Scale

The following is a guest blog by ITSPmagazine, based on their interview of Qualys President & CEO Sumedh Thakar at Black Hat USA 2026. Sumedh Thakar has watched the same clock compress for 23 years. He joined Qualys as an early software engineer on the scanner, when organizations scanned once every 90 days and gave themselves another 90 days to fix what turn…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Vulnerability Research & Audits
Advisory
NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771) Critical CVE-2026-88771 Help Net Security
2026-09-29 Help Net Security

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day exploits has now become widespread “spray and pray” exploitation, fueled by the publication of a root-cause analysis and a proof-of-concept exploit for CVE-2026-88771, which is remotely exploitable on unpatch…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Cyber Defense
Advisory
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers Critical Dark Reading
2026-09-29 Dark Reading

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Infosec
Advisory
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown Critical The Hacker News
2026-09-29 The Hacker News

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown

Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown. "During the shutdown, this activity led to the discovery of a previously unknown critical vulnerability confined to a capability that is enabled for less than 1…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Three Million Affected in Pentagon Personnel Agency Data Breach Critical SecurityAffairs
2026-09-29 SecurityAffairs

Three Million Affected in Pentagon Personnel Agency Data Breach

Pentagon personnel agency breach exposed data of 3 million people after attackers accessed a file-sharing server for about nine months. The U.S. Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense, is notifying people that their personal information was exposed in a data breach. According to the agency, unauth…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Cyber Crime & Data Breaches
Advisory
Catch threats before they escalate with real-time Identity Telemetry Moderate BleepingComputer
2026-09-29 BleepingComputer

Catch threats before they escalate with real-time Identity Telemetry

Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate suspicious activity before it escalates. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Cyber Defense & Malware
Advisory
LastPass warns employees before they share sensitive data with AI tools Moderate Help Net Security
2026-09-29 Help Net Security

LastPass warns employees before they share sensitive data with AI tools

LastPass has announced an expansion of its Business Max offering to include AI Monitoring & Protect and Web Monitoring & Protect, new visibility and governance capabilities that enable organizations to identify and secure the AI tools, SaaS applications, and websites its employees use, all from its existing browser-native extension. AI Monitoring & Protect c…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Cyber Defense
Advisory
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent Moderate The Hacker News
2026-09-29 The Hacker News

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. "The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vital…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Threat Intelligence
Advisory
Postman adds security controls for AI agents, APIs, and MCP servers Moderate Help Net Security
2026-09-29 Help Net Security

Postman adds security controls for AI agents, APIs, and MCP servers

Postman has announced the general availability of Fabric Gateway, a protocol-agnostic control plane for governing how AI agents, LLMs, and MCP servers discover and interact with APIs, tools, and other agents. With Fabric Gateway, organizations can securely connect AI agents to their APIs while centrally controlling what agents can discover, access, and do wi…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Cyber Defense
Advisory
Scans for Wordfence Protected Websites, (Tue, Sep 29th) Moderate SANS Internet Storm Center
2026-09-29 SANS Internet Storm Center

Scans for Wordfence Protected Websites, (Tue, Sep 29th)

Starting yesterday, our sensors picked up a small number of scans for "wordfence-waf.php". This particular script is used by Wordfence, a solution to protect WordPress sites. During the Wordfence install, the wordpress-waf.php file will be created in the site's root directory [1].

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Operational Threat Radar
Advisory
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks Critical CVE-2026-86950 SecurityAffairs
2026-09-29 SecurityAffairs

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

Apple patched zero-day CVE-2026-86950 in CoreGraphics, exploited in sophisticated targeted attacks against specific iOS users. Apple has released security updates for iOS, iPadOS and macOS to fix a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that may have been exploited in attacks against specific individuals. The flaw is an out-of-bou…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Cyber Crime & Data Breaches
Advisory
Webinar: Closing the accountability gap in AI-assisted delivery Moderate Help Net Security
2026-09-29 Help Net Security

Webinar: Closing the accountability gap in AI-assisted delivery

Source control records who committed code. It does not record who made the decisions behind it, and that gap is widening as AI agents take on more of the delivery process. This session explores how organisations can adapt accountability models for an AI-assisted development environment. What’s covered: How organisations can adapt accountability models for an…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Enterprise Cyber Defense
Advisory
Using AI to chart a course for our post-quantum migration Moderate Cloudflare Security
2026-09-29 Cloudflare Security

Using AI to chart a course for our post-quantum migration

As laboratories around the world race to build out a cryptographically relevant quantum computer , we at Cloudflare are racing towards a 2029 target deadline for full post-quantum readiness . While we’ve already transitioned many of our products to post-quantum encryption, we still have work to do to support post-quantum authentication and achieve full post-…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
DDoS, Botnets & Edge Security
Advisory
Building a certificate authority for the whole Internet Moderate Cloudflare Security
2026-09-29 Cloudflare Security

Building a certificate authority for the whole Internet

Twelve years ago, during Birthday Week 2014, we turned on Universal SSL and nearly doubled the number of encrypted sites on the web overnight, giving free TLS to every site behind Cloudflare, including the ones that never paid us a cent. Encryption stopped being an expensive, time-intensive undertaking and instead became the default. For Birthday Week this y…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
DDoS, Botnets & Edge Security
Advisory
Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account Critical Cloudflare Security
2026-09-29 Cloudflare Security

Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account

Organizations can now scale threat intelligence expertise the way they scale infrastructure. Threat intelligence analysts and network defenders have long automated the ingestion of structured threat feeds to help enrich their SIEM or WAF. The harder work has always been unstructured reporting: turning a research post into indicators your tools can use, witho…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
DDoS, Botnets & Edge Security
Advisory
Building a post-quantum certificate authority with Merkle Tree Certificates Critical Cloudflare Security
2026-09-29 Cloudflare Security

Building a post-quantum certificate authority with Merkle Tree Certificates

When you type in an address into a browser, how do you know you’re connecting to the right website? The Web Public Key Infrastructure (Web PKI) is the complex and distributed ecosystem of policies, protocols, and infrastructure operators that helps you trust that you’re not being misdirected to an incorrect or malicious website. In the past few decades, this…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
DDoS, Botnets & Edge Security
Advisory
1 ... 60 61 62 63 64 ... 110
Notification