Cybersecurity and other IT news aggregator

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets 2026-09-30 at 21:27 By Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated…

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks 2026-09-30 at 21:27 By Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. “Once executed, the legitimate MSP360 installer, distributed under…

Better.com founder Vishal Garg claims shareholder victory to oust CEO, board less than 2 months after firing 2026-09-30 at 20:00 By Ariel Zilber If Better formally accepts the votes as valid, Garg’s group would have enough shareholder support to reshape the board. This article is an excerpt from Latest Technology News | New York Post…

ShinyHunters and the New Reality of Identity Theft 2026-09-30 at 20:00 By The new generation of cybercriminals, exemplified by groups like ShinyHunters, practice a more persistent version of identity theft. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Improving Security Training to Adapt to Modern Phishing Schemes 2026-09-30 at 19:00 By Security magazine speaks with with Ron Zayas, Chief Executive Officer at Ironwall by Incogni, about the risks associated with online, publicly accessible information. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

40M McDonald’s Records Exposed Through Customer Data Platform 2026-09-30 at 18:40 By McDonald’s Indonesia exposed more than 40 million records.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager 2026-09-30 at 18:24 By Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to…

Anthropic co-founder Daniela Amodei and husband used stuffed-animal ‘advisory council’ for workplace conflicts: report 2026-09-30 at 18:05 By Ariel Zilber Anthropic co-founder Daniela Amodei used stuffed animals to work through office problems, giving them names and personalities for “managerial role-playing,” according to a report. This article is an excerpt from Latest Technology News | New…

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures 2026-09-30 at 18:00 By Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks…

Know Your Enemy: Browser-Based Attack Techniques in 2026 2026-09-30 at 17:11 By Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to…

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub 2026-09-30 at 14:30 By AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations,…

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access 2026-09-30 at 13:45 By ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft…

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT 2026-09-30 at 13:16 By Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG)…

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted 2026-09-30 at 13:16 By A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if…

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution 2026-09-30 at 08:30 By Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-88772 (CVSS score: 9.5), has been described as…

11 more women allegedly abused by tech honchos come forward after Post’s Silicon Valley ‘sex assault list’ expose 2026-09-30 at 00:41 By Vivi Lin “We need another MeToo movement for the tech community,” one tech worker told The Post. This article is an excerpt from Latest Technology News | New York Post View Original Source

Meta releases new ‘secret weapon’ Muse assistant aimed at small businesses 2026-09-30 at 00:23 By Will Zimmerman Muse for Small Business, available both online and in the app store in the U.S. and Canada, is an extension of the artificial intelligence product Meta launched earlier in September for personal use. This article is an excerpt…