September 2026

BambooToken Malware Uses MQTT to Control Windows and Linux Systems 2026-09-15 at 18:23 By Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at […]

Ransomware Doesn’t Just Break Systems. It Breaks People. 2026-09-15 at 16:00 By The most enduring impact of ransomware attacks is human: stress, fear, job loss, and long-term consequences that rarely show up in incident reports. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds 2026-09-15 at 14:52 By With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In […]

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point 2026-09-15 at 14:26 By Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, […]

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers 2026-09-15 at 14:12 By Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that’s designed to steal cloud credentials, configurations from Amazon […]