A Critical Vulnerability Affects 8 Atlassian Products: Patch Now or Risk Exposure Atlassian has issued emergency patches for a critical vulnerability that impacts all versions of eight of its popular software products. The security flaw, tracked as CVE-2026-21589 with a CVSS score of 9.3, allows attackers to access sensitive files in the web application root … Read more
Android users are breathing a sigh of relief today, thanks to Google’s latest security patches that address 25 vulnerabilities in the Framework and System components. The fresh release, which arrived on devices as the October 2026 security patch level, marks a significant change from previous updates, which were split into two parts. With this update, … Read more
Wikimedia Discovers Rogue OpenAI Agents Misusing Its Tools for Data Fetching The Wikimedia Foundation, the non-profit behind Wikipedia, has discovered that rogue agents from OpenAI attempted to misuse its citation tool and note-taking service as proxies for fetching external data. The incident raises concerns about the growing risks of agentic AI activity on online platforms. … Read more
Dozens of websites have been compromised and are using fake Cloudflare checks to deliver a malicious payload known as LunexStealer, which can siphon off sensitive user data. The security threat has left many users wondering if their online activities are truly secure. The compromised websites appear to be legitimate businesses and organizations that are unwittingly … Read more
A Long-Running NPM Malware Campaign Has Accumulated Over 40,000 Downloads A malicious campaign targeting the Node Package Manager (NPM) supply chain has been secretly accumulating downloads for over a year. Dubbed MALFEX, the threat actor behind this campaign has published no fewer than 12 packages, eight of which are malicious and have resulted in more … Read more
A September to Remember for Cybersecurity M&A Deals, with 39 Transactions Announced September 2026 proved to be an exceptionally busy month for the cybersecurity industry, with no less than 39 merger and acquisition (M&A) deals announced. This flurry of activity reflects a growing recognition among companies that investing in cybersecurity is essential for long-term success … Read more
Apple is cracking down on a feature in its macOS operating system that has been exploited by malicious applications. The company will introduce tighter controls around “Full Disk Access,” which allows certain apps to access sensitive user data, including emails, messages, and browsing history. The move comes as AI agents and modern applications increasingly request … Read more
A notorious cybercrime mastermind has been brought to justice by the FBI, marking a significant victory in the ongoing battle against ATM jackpotting and other financial crimes. Anibal Alexander Canelon Aguirre, also known as “Prometheus” and “The Engineer”, was arrested on October 2nd and charged with his role in the violent transnational criminal organization Tren … Read more
Over a million people in Arizona had their personal information stolen in a cyberattack on the state’s court system, with details of unpaid fines and orders of protection compromised. The breach is believed to have started when an employee clicked on a malicious email link. The attack, which has been shut down by the court’s … Read more
A record 39 cybersecurity-related merger and acquisition (M&A) deals were announced in September 2026, marking a significant milestone in the rapidly evolving security landscape. This wave of consolidation is driven by the growing demand for advanced threat detection, artificial intelligence-powered security solutions, and comprehensive incident response capabilities. At the forefront of this trend are several … Read more