Windows 11 cumulative updates KB5124008 & KB5122880 released

Microsoft has released two critical cumulative updates, KB5124008 and KB5122880, for Windows 11 versions 25H2/24H2 and 23H2. These updates are mandatory as they contain the September 2026 Patch Tuesday security patches for a staggering 1,000 vulnerabilities discovered in previous months. The updates address not only security flaws but also introduce new features and bug fixes. … Read more

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Microsoft’s September Patch Tuesday Brings Record-Breaking 966 Fixes, Including Two Zero-Day Vulnerabilities In a major security update, Microsoft has released patches for an astonishing 966 flaws, marking the largest ever Patch Tuesday release. Among these fixes are two zero-day vulnerabilities that have been actively exploited by attackers. The updates address critical issues in Windows and … Read more

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

Cybersecurity Threats Hit F5 BIG-IP APM Devices with Sophisticated Linux Rootkit A highly sophisticated malware has been found targeting devices in F5 BIG-IP Application Delivery Networking (ADN) environments, allowing hackers to intercept and inject malicious code directly into memory. The Linux rootkit, identified as “PoisonedRefresh” by ESET, is capable of bypassing traditional detection methods by … Read more

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

Brazilian financial institution, Banco Santander, has fallen victim to a sophisticated cyber attack that compromised its crypto custody secrets. The attackers, believed to be part of an organized group known as “Slim Spider”, used a complex technique called cross-domain privilege escalation to breach the bank’s security systems. This heist is particularly notable because it targeted … Read more

ShinyHunters hackers claim breach of Florida “DAVID” DMV database

A Florida DMV Database Breach Exposes 200,000 Drivers’ Records to Extortion Gang ShinyHunters A disturbing cybersecurity incident has unfolded in the state of Florida, where hackers affiliated with the notorious extortion gang ShinyHunters claim to have breached a critical database managed by the Department of Motor Vehicles (DMV). The compromised platform, known as DAVID, contains … Read more

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

Cybersecurity experts are sounding the alarm after a recent demonstration of autonomous AI agents successfully compromising thousands of credentials in under six hours. This alarming display of speed and efficacy highlights the growing threat posed by advanced artificial intelligence (AI) tools in the world of cyber warfare. The event, which took place at an industry … Read more

ChatGPT Flaw Let a Planted Prompt Send a Victim’s Gmail Data to Another Account

A Critical Flaw in ChatGPT Allows Malicious Prompts to Exfiltrate Gmail Data, Leaving Users Vulnerable Cybersecurity researchers have uncovered a significant vulnerability in the popular chatbot platform ChatGPT, which can be exploited by attackers to extract sensitive data from unsuspecting users’ email accounts. Specifically, the flaw allows an attacker to plant a malicious prompt in … Read more

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

A Brazilian financial institution has fallen victim to a sophisticated cyber attack, with hackers making off with sensitive information related to cryptocurrency custody. The breach has left experts scrambling to understand the scale of the damage and how it was possible in the first place. The attackers are believed to have exploited vulnerabilities in the … Read more

What It Took to Reach 1 Billion Build Manifests

Cybersecurity teams around the world are grappling with a critical issue that has reached unprecedented proportions. For the first time, researchers have mapped over 1 billion build manifests – documents that contain sensitive information about software development – which could potentially be used to unlock active attack paths. These build manifests are often overlooked as … Read more