ICYMI: 2026-09-16
Latest Headlines
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can’t Install Fix
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover
Hackuity Raises $19 Million for AI-Powered Vulnerability Management
Check Point Vulnerability Lets Remote Hackers Gain Root Access Without Authentication
CenterPoint Energy Data Breach – Hackers Stolen Customer’s Personal Data
CISA Warns of Critical ScreenConnect Vulnerability Actively Exploited in Attacks
German Manufacturer Shrinks Security Alert Response While Protecting 10,000 Endpoints
Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors
Hackers Can Rent VectraRAT for $250 a Month to Take Control of Windows PCs
Hackers Use Cross-Platform Noodle RAT to Secretly Control Windows and Linux Systems
Windows 11 KB5124008 update breaks domain trust for some users
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Malware bypasses browser checks to force install Chrome, Edge extensions
Spain’s data agency gets first report of AI-powered data breach
Microsoft says Copilot buttons still missing in classic Outlook
Webinar: What happens in the first hours of a Google Workspace breach
Critical ScreenConnect flaw now actively exploited in attacks
Windows Server 2022 reaches end of mainstream support next month
Google fixes actively exploited Android zero-day on Pixel devices
– MTZ