Aggregator

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have released final technical guidance to stop attackers from forging, stealing, replaying, or misusing identity and access tokens. Published as NIST Interagency Report 8587 on September 15, 2026, it gives federal agencies and cloud service providers a roadmap for […]

The post CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse appeared first on Cyber Security News.

CISA and five international cybersecurity agencies have released detailed guidance describing 17 common techniques hackers use to compromise Microsoft Active Directory environments. The technical guide explains how attackers exploit identity configurations, legacy protocols, certificate services, and privileged systems to escalate access, move laterally, and establish long-term persistence inside enterprise networks. Developed by the Australian Signals […]

The post CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory Environments appeared first on Cyber Security News.

Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Vision Pro, Safari, and Xcode. The patches arrived on September 14, 2026, through iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27, and Xcode 27, […]

The post Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices appeared first on Cyber Security News.

You can’t detect today’s attacks with yesterday’s threat intelligence; that’s how you could briefly formulate the challenge many modern SOCs face.  Indicators lose relevance quickly. New infrastructure appears daily. SOCs struggle to keep up.  This is happening because malware campaigns increasingly rely on rotating domains, hosting infrastructure, and phishing flows. Attackers don’t need to come […]

The post How to Keep Malware’s Rotating Infrastructure From Becoming a Detection Gap  appeared first on Cyber Security News.

Microsoft has published a draft Humanist AI Code of Conduct that would prohibit its in-house MAI models from launching cyberattacks, supplying operational attack capabilities, or increasing their own privileges. The rules also require agents to remain interruptible, transparent, and confined to human-assigned permissions and objectives. The document, released for a six-week public consultation, is intended […]

The post Microsoft Bans Its AI Models From Launching Cyberattacks or Escalating Their Own Access appeared first on Cyber Security News.

A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...]

Hackers are advertising a new “uncensored” artificial intelligence service called Luciferus, positioning it as a subscription assistant willing to process malware-development requests that mainstream AI systems would reject. Sophos Counter Threat Unit (CTU) researchers discovered the offering on August 24, 2026, on the Exploit underground forum. It targets criminal customers seeking fewer technical and operational […]

The post Hackers Advertise Uncensored Luciferus AI Service on Underground Forums appeared first on Cyber Security News.

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting the flaw in real-world attacks. The issue, tracked as CVE-2026-76461, affects Cisco AsyncOS software used by Cisco Secure Email Gateway appliances. CVE-2026-76461 is an SQL injection vulnerability, categorized under CWE-89. It could allow […]

The post CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.

Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...]

Japan’s Digital Agency has confirmed a significant data breach affecting the Government Solution Service (GSS), a shared IT platform used across multiple ministries and government bodies, after attackers exploited a vulnerability in a VPN appliance to gain unauthorized access to internal servers. The agency disclosed on September 11 that approximately 246,000 personal records may have […]

The post Japan’s Digital Agency Breach Exposes 240,000+ Users’ Personal Records to Hackers appeared first on Cyber Security News.

Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours

报告时间：2026年9月18日（周五）上午10:00

Homebrew has released version 7.0.0, introducing a native vulnerability scanner, a Homebrew-specific advisory database, stronger sandboxing, and faster package installation workflows. The release also ends support for macOS Catalina 10.15 and moves Intel-based Macs to Tier 3 support. The most security-focused addition is the new brew vulns command. It allows users and security teams to scan installed […]

The post Homebrew 7.0.0 Adds Built-In Vulnerability Scanner and Stronger Package Sandboxing appeared first on Cyber Security News.

cPanel has issued an urgent security advisory warning that a critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privileged shared-hosting user to gain root-level access to an affected server. Administrators are urged to upgrade LiteSpeed Enterprise to version 6.3.7 or later immediately. The flaw affects LiteSpeed Web Server Enterprise versions earlier than 6.3.7. […]

The post cPanel LiteSpeed Web Server Vulnerability Allows Shared Server Users to Gain Root-Level Access appeared first on Cyber Security News.