BleepingComputer
Citrix confirms two NetScaler RCE zero-days exploited in attacks
Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws. [...]
27 septembre 2026 à 12:02

Citrix confirms two NetScaler RCE zero-days exploited in attacks

27 septembre 2026 à 12:02

Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws. [...]

BleepingComputer
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]
27 septembre 2026 à 10:13

Cloudflare fixes Containers cross-tenant flaw exposing customer data

BleepingComputer

Par : Bill Toulas

27 septembre 2026 à 10:13

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]

BleepingComputer
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]
26 septembre 2026 à 15:03

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

BleepingComputer

Par : Lawrence Abrams

26 septembre 2026 à 15:03

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. [...]

BleepingComputer
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]
26 septembre 2026 à 10:19

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

BleepingComputer

Par : Bill Toulas

26 septembre 2026 à 10:19

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]

BleepingComputer
OpenAI's AI agents accidentally uploaded user-provided images to third-party sites
OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks. [...]
26 septembre 2026 à 08:28

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

BleepingComputer

Par : Mayank Parmar

26 septembre 2026 à 08:28

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks. [...]

BleepingComputer
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. [...]
25 septembre 2026 à 17:41

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

BleepingComputer

Par : Lawrence Abrams

25 septembre 2026 à 17:41

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. [...]

BleepingComputer
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]
25 septembre 2026 à 16:57

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

BleepingComputer

Par : Lawrence Abrams

25 septembre 2026 à 16:57

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]

BleepingComputer
Elementor WordPress flaw lets attackers create admin accounts
A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]
25 septembre 2026 à 14:13

Elementor WordPress flaw lets attackers create admin accounts

BleepingComputer

Par : Bill Toulas

25 septembre 2026 à 14:13

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]

BleepingComputer
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]
25 septembre 2026 à 13:24

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

BleepingComputer

Par : Bill Toulas

25 septembre 2026 à 13:24

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]

BleepingComputer
With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance
AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities. [...]
25 septembre 2026 à 10:51

With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance

BleepingComputer

Par : Sponsored by Token Security

25 septembre 2026 à 10:51

AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities. [...]

Articles on TechRepublic
Hackers Are Using Passkey Updates as a New Microsoft Phishing Hook
Microsoft warns attackers are using passkey and MFA update requests to phish employees, hijack sessions, and access Microsoft 365 data. The post Hackers Are Using Passkey Updates as a New Microsoft Phishing Hook appeared first on TechRepublic.
18 septembre 2026 à 19:36

Hackers Are Using Passkey Updates as a New Microsoft Phishing Hook

Articles on TechRepublic

Par : Joseph Ofonagoro

18 septembre 2026 à 19:36

Microsoft warns attackers are using passkey and MFA update requests to phish employees, hijack sessions, and access Microsoft 365 data.

The post Hackers Are Using Passkey Updates as a New Microsoft Phishing Hook appeared first on TechRepublic.

Articles on TechRepublic
UAE Cyber Chief Says Country Faced 640,000 Cyberattacks in One Day
The UAE faced 640,000 cyberattacks in one day, its cyber chief says, highlighting risks from unpatched software, ransomware, and deepfakes. The post UAE Cyber Chief Says Country Faced 640,000 Cyberattacks in One Day appeared first on TechRepublic.
18 septembre 2026 à 19:30

UAE Cyber Chief Says Country Faced 640,000 Cyberattacks in One Day

Articles on TechRepublic

Par : Aminu Abdullahi

18 septembre 2026 à 19:30

The UAE faced 640,000 cyberattacks in one day, its cyber chief says, highlighting risks from unpatched software, ransomware, and deepfakes.

The post UAE Cyber Chief Says Country Faced 640,000 Cyberattacks in One Day appeared first on TechRepublic.

Articles on TechRepublic
Hackers Crack Flock Camera, Expose 1.6M Images in 21 Days
Hackers physically compromised a Flock camera and found an encryption key, 27,000 clips, and 1.6 million images generated in 21 days. The post Hackers Crack Flock Camera, Expose 1.6M Images in 21 Days appeared first on TechRepublic.
18 septembre 2026 à 17:48

Hackers Crack Flock Camera, Expose 1.6M Images in 21 Days

Articles on TechRepublic

Par : Kezia Jungco

18 septembre 2026 à 17:48

Hackers physically compromised a Flock camera and found an encryption key, 27,000 clips, and 1.6 million images generated in 21 days.

The post Hackers Crack Flock Camera, Expose 1.6M Images in 21 Days appeared first on TechRepublic.

Articles on TechRepublic
Trump Bets $215 Million on Quantum Computing: DOE Targets Practical Systems
The DOE is offering up to $215 million through Quantum Genesis Q to accelerate fault-tolerant quantum computers with at least 100 logical qubits. The post Trump Bets $215 Million on Quantum Computing: DOE Targets Practical Systems appeared first on TechRepublic.
18 septembre 2026 à 17:35

Trump Bets $215 Million on Quantum Computing: DOE Targets Practical Systems

Articles on TechRepublic

Par : Eric Mboizi

18 septembre 2026 à 17:35

The DOE is offering up to $215 million through Quantum Genesis Q to accelerate fault-tolerant quantum computers with at least 100 logical qubits.

The post Trump Bets $215 Million on Quantum Computing: DOE Targets Practical Systems appeared first on TechRepublic.

BleepingComputer
Gyazo server flaw exploited to steal 23.6 million user records
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. [...]
18 septembre 2026 à 12:00

Gyazo server flaw exploited to steal 23.6 million user records

BleepingComputer

Par : Bill Toulas

18 septembre 2026 à 12:00

The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. [...]

BleepingComputer
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
18 septembre 2026 à 11:19

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

BleepingComputer

Par : Bill Toulas

18 septembre 2026 à 11:19

An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]

Articles on TechRepublic
AI Expansion, Robot Factories, and Escalating Security Threats Define This Week in Tech
See what you missed in Daily Tech Insider from Sept. 14–18. The post AI Expansion, Robot Factories, and Escalating Security Threats Define This Week in Tech appeared first on TechRepublic.
18 septembre 2026 à 10:02

AI Expansion, Robot Factories, and Escalating Security Threats Define This Week in Tech

Articles on TechRepublic

Par : TechRepublic Staff

18 septembre 2026 à 10:02

See what you missed in Daily Tech Insider from Sept. 14–18.

The post AI Expansion, Robot Factories, and Escalating Security Threats Define This Week in Tech appeared first on TechRepublic.

BleepingComputer
Secure enterprise sharing with access reviews for Microsoft 365
Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little visibility into who can still reach sensitive data. tenfold Software explains how centralized access governance and owner-driven reviews can help identify and remove unnecessary access. [...]
18 septembre 2026 à 10:00

Secure enterprise sharing with access reviews for Microsoft 365

BleepingComputer

Par : Sponsored by tenfold Software

18 septembre 2026 à 10:00

Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little visibility into who can still reach sensitive data. tenfold Software explains how centralized access governance and owner-driven reviews can help identify and remove unnecessary access. [...]

BleepingComputer
Microsoft Teams will let admins block custom file extensions
Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements. [...]
18 septembre 2026 à 09:58

Microsoft Teams will let admins block custom file extensions

BleepingComputer

Par : Sergiu Gatlan

18 septembre 2026 à 09:58

Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements. [...]

BleepingComputer
Webinar: Which Google Workspace security controls actually matter?
Fast-growing companies face countless recommendations for securing Google Workspace, but not every control provides the same value. This webinar examines real-world breaches to explore which security controls matter most, which may be overrated, and where lean security teams should focus their resources. [...]
18 septembre 2026 à 09:10

Webinar: Which Google Workspace security controls actually matter?

BleepingComputer

Par : BleepingComputer

18 septembre 2026 à 09:10

Fast-growing companies face countless recommendations for securing Google Workspace, but not every control provides the same value. This webinar examines real-world breaches to explore which security controls matter most, which may be overrated, and where lean security teams should focus their resources. [...]

Vue normale