ICYMI: 2026-09-25
Latest Headlines
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court
Windows, Linux, Android File Notification Systems Leak User Activity
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
OnePlus 15 Flaws Let Zero-Permission Apps Gain Root Access Through OxygenOS Services
14-Year-Old Linux Kernel Flaw Lets Local Users Gain Root Access and Escape Containers
Hackers Used a Samsung Flaw to Build a Cryptominer Inside Victim Systems
Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers
Sauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection
TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace
Critical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now!
WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments
Attackers Are Turning Everyday Business Emails Into Malware Delivery Machines
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
Elementor WordPress flaw lets attackers create admin accounts
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions
OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex
With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance
Rydox marketplace admin pleads guilty, faces 22 years in prison
Microsoft: Recent Windows updates cause desktop loading issues
– MTZ