Microsoft’s Latest Patch Tuesday Update Leaves Excel Users in a Sticky Situation A growing number of users have reported that the KB5002914 security update, released last week as part of Microsoft’s September 2026 Patch Tuesday, is causing copy and paste functionality to break in Excel. The issue affects various versions of Excel, including 2024, 2021, … Read more
Cybersecurity teams face unprecedented challenges in today’s fast-paced threat landscape. The recent PaperCut vulnerability response is a prime example of what happens when AI accelerates vulnerability discovery and exploitation. In this article, we’ll explore the intricacies of zero-day response in the post-Mythos era and provide practical advice for security professionals. The case of PaperCut NG … Read more
A critical vulnerability in a popular third-party plugin for WordPress has been exploited by hackers to upload malicious code and gain control over websites. The issue, tracked as CVE-2026-27540, affects versions 2.0.3.1 and older of the WooCommerce Wholesale Lead Capture premium plugin. The flaw was discovered by security researcher Teemu Saarentaus and allows attackers to … Read more
A previously unknown malware framework called BambooToken has been using the Message Queuing Telemetry Transport (MQTT) protocol to secretly control Windows and Linux systems, compromising servers used by mobile apps, legal and financial services, and software development. Researchers at ESET first documented an unrelated backdoor called MQsTTang in 2023, but it’s only now that we’re … Read more
BambooToken Malware Exploits MQTT Protocol to Control Windows and Linux Systems, Wreaking Havoc on Organizations Worldwide A sophisticated malware strain called BambooToken has been discovered using a popular Internet of Things (IoT) communication protocol to infiltrate and take control of both Windows and Linux systems. This cunning tactic allows the attackers to move undetected within … Read more
Cybersecurity experts are on high alert as the US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in VMware’s vCenter Server, patched just two months ago, is now being actively exploited by ransomware gangs. The agency warns that these groups have joined other attackers in using this flaw to gain unauthorized … Read more
Zero-Day Response in the Post-Mythos Era: What Happens When Vulnerability Discovery Speeds Up The past week of August 2026 was a stark reminder of what vulnerability response looks like when AI accelerates vulnerability discovery. PaperCut, a popular print management software, issued an urgent advisory on August 27 stating that attackers were already exploiting servers, with … Read more
Cybersecurity experts are sounding the alarm after hackers began exploiting a critical vulnerability in a popular WooCommerce plugin for WordPress, leaving thousands of websites potentially exposed to takeover. The vulnerability, tracked as CVE-2026-27540, affects older versions (2.0.3.1 and below) of the WooCommerce Wholesale Lead Capture premium plugin, which is used by many online stores to … Read more
BambooToken Malware Uses MQTT Protocol to Control Windows and Linux Systems, Compromising Enterprise Entities Worldwide A sophisticated malware framework called BambooToken has been discovered using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with compromised Windows and Linux systems. The malware, which has been active since at least 2023, has been linked to a … Read more
A newly discovered malware, dubbed BambooToken, is spreading rapidly across Windows and Linux systems by exploiting a vulnerability in the Message Queuing Telemetry Transport (MQTT) protocol. This stealthy threat has already been spotted on numerous networks worldwide, putting thousands of organizations at risk. The BambooToken malware works by injecting malicious code into vulnerable MQTT servers, … Read more