Rubric
News
Page@news
Reporting on attacks, breaches and security fixes.
Malware newsThe Hacker News reports that attackers are actively exploiting a critical Bricksforge WordPress flaw that can let unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites. The plugin versions up to and including 3.1.8.9 are affected, and users are advised to update to the latest version and check for unexpected PHP files and repeated submissions to the plugin’s form endpoint.
Exploited flawsSecurityWeek reports that attackers are already exploiting a critical SonicWall flaw in SMA1000 appliances days after it was disclosed. SonicWall says customers should update 6210, 7210, and 8200v models to versions 12.5.0-03082 or 12.4.3-03670. The bug could let a remote attacker direct the appliance to issue requests on their behalf and reach internal functionality.
Exploited flawsHelp Net Security reports that Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity flaw, CVE-2026-96940. The bug may let authenticated attackers read emails and attachments of other users in the same organization, so Exchange Server admins should install the update as soon as possible.
Malware newsThe FBI has arrested another suspected co-conspirator of ShinyHunters after the group said it breached the FBI’s jobs portal and stole sensitive data on almost all FBI agents and job applicants, The Hacker News reports. The FBI said the breach happened after a contractor failed to implement a security patch for the platform. The agency has removed the contractor.
Data breachesThe Record reports that the FBI arrested another suspected ShinyHunters member after the group breached its jobs site. The hackers stole sensitive data on nearly every FBI employee, including medical records, home addresses, phone numbers, and work locations, and also exposed records about local police officers on task forces. People affected by similar breaches should change passwords, turn on two-step verification, and watch accounts for unusual activity.
Exploited flawsThe Register reports that researchers found two characters that can trick Chromium browsers into showing lookalike URLs as genuine web addresses. The issue affects Chromium-based browsers such as Chrome and Edge, and the fake domains can bypass browser safety checks. Windows users should update their browser when a fix is available and be careful with links that look like familiar sites but use unusual characters.
Malware newsThe Hacker News reports that attackers have compromised open-source maintainer accounts to push a malicious GitHub Actions workflow into more than 340 repositories, with more than 500 GitHub accounts affected since October 7. The workflow is designed to steal secrets, including cloud, SaaS and AI credentials. Developers should check for the named workflows, revoke compromised GitHub credentials, rotate secrets, and delete the malicious workflow from all branches.
Browser securityChrome Releases reports that the Stable channel is being updated to ChromeOS version 16805.33.0, with browser version 154.0.8037.151 for most ChromeOS devices. The update includes multiple Chrome browser security fixes, including several high and critical issues in V8, Passwords, PDFium, and other components. Windows users should update Chrome when prompted and avoid delaying security updates.
Data breachesThe Record reports that medical device maker iRhythm said data on at least 360,000 people was breached in a June cyberattack. The stolen information includes names, addresses, phone numbers, patient account numbers, device serial numbers, insurance numbers, dates of service and dates of birth. iRhythm says the attack did not affect its devices or operations, but affected people should watch their accounts and be alert for misuse of their personal information.
Malware newsSecurityWeek reports that Bitdefender found Midnight Mimosa, a campaign that ships malware preinstalled in the firmware of low-cost Android devices built on MediaTek platforms. The malware can silently install and remove apps, grant permissions, and load code remotely, and some related apps were also found on Google Play. Windows users should be cautious with cheap devices and avoid installing apps from untrusted sources.
Exploited flawsSecurityWeek reports that Citrix is urging immediate patching of a critical NetScaler vulnerability that could lead to remote code execution or denial of service. The flaw affects NetScaler ADC and NetScaler Gateway appliances in specific SAML configurations, as well as Secure Private Access Hybrid deployments. Citrix says it is not aware of unmitigated exploits, but users should update to the fixed versions as soon as possible.
Malware newsMalwarebytes Labs reports that attackers compromised infrastructure behind the .gh, .sl, and .as country-code domain namespaces and used it to obtain unauthorized HTTPS certificates for Google domains and other organizations. Google blocked the certificates in Chrome and worked with certificate authorities to revoke them. Windows users should keep their browser and operating system updated and never bypass certificate warnings.
Loading…
No more articles
Could not load, try again