New Russian Infostealer Targeting Ukrainian Users 2026-09-25 at 18:00 By A four-stage attack chain linked to the Lunex Malware-as-a-Service platform has been identified and reverse-engineered. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source
New Russian Infostealer Targeting Ukrainian Users Read More »
North Korea Suspected in $351 Million Bitget Crypto Heist 2026-09-25 at 17:16 By Eduard Kovacs Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen. The post North Korea Suspected in $351 Million Bitget Crypto Heist appeared first on SecurityWeek. This article is an […]
North Korea Suspected in $351 Million Bitget Crypto Heist Read More »
SlowMist has yet to confirm crypto theft from iPhone Safari attack 2026-09-25 at 16:05 By Cointelegraph by Helen Partz The analyzed Safari sample targets iOS 18.4–18.6.2 using previously patched flaws, while its effectiveness on iOS 26.5 remains unverified. This article is an excerpt from Cointelegraph.com News View Original Source
SlowMist has yet to confirm crypto theft from iPhone Safari attack Read More »
The SOC Doesn’t Need to Start Over with Every Alert 2026-09-25 at 16:05 By Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on […]
The SOC Doesn’t Need to Start Over with Every Alert Read More »
CoinMarketCap buys CoinGlass to expand crypto derivatives data 2026-09-25 at 15:44 By Cointelegraph by Yohan Yun CoinGlass will retain its brand and team, while its website, app, free tools, API and pricing will remain unchanged following the acquisition. This article is an excerpt from Cointelegraph.com News View Original Source
CoinMarketCap buys CoinGlass to expand crypto derivatives data Read More »
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks 2026-09-25 at 15:39 By Eduard Kovacs Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. The post CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks Read More »
IBIT options price trading more calmly after Bitcoin rebound 2026-09-25 at 15:23 By Cointelegraph by Yohan Yun IBIT’s expected volatility sits near the bottom of its 12-month range, according to Saxo Bank’s analysis of options data from Sept. 23. This article is an excerpt from Cointelegraph.com News View Original Source
IBIT options price trading more calmly after Bitcoin rebound Read More »
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court 2026-09-25 at 15:16 By Ionut Arghire Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services. The post Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court appeared first on SecurityWeek. This article is an excerpt from […]
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court Read More »
Threat detection dashboards are masking security coverage gaps 2026-09-25 at 15:04 By Sinisa Markovic A detection rule can show up as deployed on a coverage dashboard and still never fire when an attacker uses the technique it was built to catch. Conifers assessed 14,652 detections in its customer base, including rules written by customers and […]
Threat detection dashboards are masking security coverage gaps Read More »
Windows, Linux, Android File Notification Systems Leak User Activity 2026-09-25 at 13:53 By Eduard Kovacs Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Windows, Linux, Android File Notification Systems Leak User Activity Read More »
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise 2026-09-25 at 13:35 By Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets,” BitGet […]
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise Read More »
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild 2026-09-25 at 13:14 By The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail […]
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild Read More »
Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data 2026-09-25 at 13:00 By A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space […]
Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data Read More »
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV 2026-09-25 at 13:00 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed […]
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV Read More »
Magic Eden scare puts 3,832 NFTs in whitehat protective custody 2026-09-25 at 12:48 By Cointelegraph by Ezra Reguerra Yuga Labs’ 0xQuit said the NFTs are safe and will be returned once the risk passes, while holders were urged to revoke NFT permissions. This article is an excerpt from Cointelegraph.com News View Original Source
Magic Eden scare puts 3,832 NFTs in whitehat protective custody Read More »
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration 2026-09-25 at 12:27 By Ionut Arghire Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks. The post ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration Read More »
MacSync info-stealing malware hides malicious commands in an iCloud calendar 2026-09-25 at 12:22 By Sinisa Markovic A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files, according to Kaspersky. Researchers found the malware spreading through a crypto wallet app called Toria, which had […]
MacSync info-stealing malware hides malicious commands in an iCloud calendar Read More »
KelpDAO sues LayerZero, CEO over $292M rsETH bridge exploit 2026-09-25 at 11:51 By Cointelegraph by Ezra Reguerra KelpDAO says LayerZero endorsed its bridge setup before the attack, while CEO Bryan Pellegrino has dismissed the lawsuit as meritless. This article is an excerpt from Cointelegraph.com News View Original Source
KelpDAO sues LayerZero, CEO over $292M rsETH bridge exploit Read More »
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions 2026-09-25 at 11:50 By Ashish Khaitan Nation-state operators rarely need a zero-day to get inside a carrier. Much of the telecom stack still runs protocols designed when every participant was a known, trusted operator. SS7 assumes that the node sending […]
Docker introduces OCI-based Kits to package agents and their guardrails 2026-09-25 at 10:57 By Industry News Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shuts down. Launched at WeAreDevelopers North America, Docker […]
Docker introduces OCI-based Kits to package agents and their guardrails Read More »