Atlassian’s Critical File-Access Flaw Exposes Jira, Confluence Users to Potential Threats Atlassian, a leading provider of collaboration software, has issued a critical security warning for its self-hosted Data Center products, including Jira, Confluence, and Bitbucket. A vulnerability tracked as CVE-2026-21589 allows an attacker with knowledge of the target file’s exact name and path to access … Read more
Yesterday marked a significant day for cybersecurity researchers and vendors alike as the Pwn2Own Ireland 2026 competition kicked off. The event, organized by the Zero Day Initiative (ZDI), brings together some of the world’s top security experts to identify zero-day vulnerabilities in various devices before malicious actors can exploit them. The first day of the … Read more
A Sophisticated Linux Backdoor Campaign Targets Korea and Taiwan, Evading Detection with Clever Disguise A complex campaign has been uncovered in which hackers have exploited vulnerabilities in Linux systems to install backdoors that masquerade as email security tools. The affected regions are primarily Korea and Taiwan, although it is likely that other countries may also … Read more
A wave of sophisticated phishing attacks is sweeping the globe, targeting users who interact with popular language models like ChatGPT, Gemini, and Claude. These high-profile portals have become unwitting accomplices in a massive credential harvesting operation, leaving millions of people vulnerable to identity theft and other cyber threats. At the heart of these scams are … Read more
FBI Fingerprints Blunder in ShinyHunters Breach, Removes Contractor In a striking example of how patch management failures can lead to devastating data breaches, the FBI has pulled an Accenture contractor from its team after a review revealed that a security patch was never applied to an Oracle PeopleSoft human resources platform. The omission allowed ShinyHunters, … Read more
Nikkei, one of the world’s largest media corporations and owner of The Financial Times, has disclosed two recent security breaches that exposed employees’ personal information and led to a wave of phishing emails targeting staff and business partners. The attacks occurred through employee email accounts on Microsoft 365 and Google Workspace. In late July, an … Read more
Cybersecurity Risks Lurk in Remote Monitoring and Management Software Used by IT Service Providers A recent spate of high-profile security incidents has highlighted the vulnerabilities inherent in remote monitoring and management (RMM) software used by IT service providers. These platforms, which grant technicians unattended administrative access to thousands of customer devices, have become a prized … Read more
Cybercriminals are using fake versions of popular AI chatbots to steal sensitive information from advertising account managers, including login credentials and multi-factor authentication (MFA) codes. The phishing campaign, which has been ongoing since March, leverages a browser-in-the-browser (BitB) attack technique that creates a fake login window inside a legitimate one. Researchers at Island, a browser … Read more
A UK-based online fashion retailer, ASOS, has confirmed a data breach after hackers sent unauthorized push notifications through its mobile app. The notification, which claimed to have been sent by the company’s Data Protection Officer and IT department, read “ASOS HACKED” and directed users to a Telegram channel operated by the threat actor. The breach … Read more
The FBI has revealed a shocking security lapse that led to a massive data breach, exposing sensitive information about thousands of bureau employees. A contractor’s failure to apply a crucial security patch to the Oracle PeopleSoft human resources platform allowed hackers from the ShinyHunters group to gain unauthorized access to the system. According to the … Read more