Threat Wire
BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys

CyberWatch Newsroom Live Intel

Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.

Last Checked: Nov 2, 2026 - 02:28:59 UTC (Hourly Auto-Sync Active)
Showing 24 of 366 advisories
Page 8 of 16
Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits Moderate BleepingComputer
2026-10-06 BleepingComputer

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Nikkei discloses breaches of employees’ Microsoft, Google email accounts Critical BleepingComputer
2026-10-06 BleepingComputer

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Engineer sentenced for locking over 3,000 devices on employer network Moderate BleepingComputer
2026-10-06 BleepingComputer

Engineer sentenced for locking over 3,000 devices on employer network

A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Rejetto HFS servers now actively scanned for critical RCE flaw Critical CVE-2026-61500 BleepingComputer
2026-10-05 BleepingComputer

Rejetto HFS servers now actively scanned for critical RCE flaw

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
IQVIA fined $7.8 million for failing to properly anonymize health data Moderate BleepingComputer
2026-10-05 BleepingComputer

IQVIA fined $7.8 million for failing to properly anonymize health data

Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly one million patients at risk of data exposure and de-anonymization. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Denmark population registry data breach affects 8.8 million people Critical BleepingComputer
2026-10-05 BleepingComputer

Denmark population registry data breach affects 8.8 million people

Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
New Dell System Update flaw lets hackers gain root privileges Important BleepingComputer
2026-10-05 BleepingComputer

New Dell System Update flaw lets hackers gain root privileges

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
South Korea probes bank breaches amid suspected AI-powered attacks Critical BleepingComputer
2026-10-05 BleepingComputer

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
tenfold CE: Our free Identity Governance tool just got 2 new features Moderate BleepingComputer
2026-10-05 BleepingComputer

tenfold CE: Our free Identity Governance tool just got 2 new features

tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Alleged dev of Ploutus ATM malware appears in US court after arrest Important BleepingComputer
2026-10-05 BleepingComputer

Alleged dev of Ploutus ATM malware appears in US court after arrest

The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Microsoft: Windows KB5124010 update crashes some games and apps Important BleepingComputer
2026-10-05 BleepingComputer

Microsoft: Windows KB5124010 update crashes some games and apps

Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after installing the September 2026 KB5124010 Windows 11 preview update. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Google halts open-source bug bounty program amid AI spam surge Critical BleepingComputer
2026-10-05 BleepingComputer

Google halts open-source bug bounty program amid AI spam surge

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Citrix patches NetScaler SAML zero-day exploited in attacks Critical CVE-2026-88779 BleepingComputer
2026-10-04 BleepingComputer

Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
ShinyHunters hacker reportedly detained in Jordan, aiding FBI Moderate BleepingComputer
2026-10-03 BleepingComputer

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Danish university DTU breach exposes data of up to 200,000 people Critical BleepingComputer
2026-10-03 BleepingComputer

Danish university DTU breach exposes data of up to 200,000 people

The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Frontline Education breach exposes school district employee data Critical BleepingComputer
2026-10-02 BleepingComputer

Frontline Education breach exposes school district employee data

Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Warlock ransomware breach SharePoint in water, telecom operator attacks Critical BleepingComputer
2026-10-02 BleepingComputer

Warlock ransomware breach SharePoint in water, telecom operator attacks

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
GitLab warns of critical RCE vulnerability in AI Gateway service Critical BleepingComputer
2026-10-02 BleepingComputer

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
US sanctions Tren de Aragua gang members in ATM hacks crackdown Moderate BleepingComputer
2026-10-02 BleepingComputer

US sanctions Tren de Aragua gang members in ATM hacks crackdown

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry Important BleepingComputer
2026-10-02 BleepingComputer

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade endpoint telemetry and why browser-level controls can help close the gap. [...]

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Notification