Category: Cyber Security News

Two vulnerabilities in the Avada Builder WordPress plugin can let attackers read arbitrary files or extract sensitive database data, including credentials and password hashes. Wordfence says both flaws were fixed in version 3.15.3, and site owners should update immediately to protect installations of the widely used plugin. #AvadaBuilder #CVE-2026-4782 #CVE-2026-4798 #Wordfence #WooCommerce

Attackers exploited a critical authentication bypass in Cisco Catalyst SD-WAN Controller and Manager, tracked as CVE-2026-20182, which Cisco and Rapid7 say can grant the highest level of administrative access. Cisco attributed the activity to UAT-8616 and warned that a single compromised controller could let attackers reroute traffic, intercept communications, and disrupt entire networks. #Cisco #CVE-2026-20182 #UAT-8616

Microsoft is introducing Cloud-Initiated Driver Recovery, a Windows Update feature that lets it remotely roll back problematic drivers without requiring hardware partners or users to intervene. The move is part of Microsoft’s broader Driver Quality Initiative and will begin rolling back drivers rejected during flighting or gradual rollout starting September 2026. #Microsoft #WindowsUpdate #CloudInitiatedDriverRecovery #WinHEC2026 #DriverQualityInitiative

OpenAI disclosed that the TanStack supply chain attack led to credential material being exfiltrated from internal source code repositories after two employee devices were infected. The company said it rotated credentials, revoked sessions, and re-signed applications after compromising code-signing certificates for its products. #OpenAI #TanStack #TeamPCP #ShaiHulud…

American Lending Center disclosed that a ransomware attack detected in July 2025 may have exposed personal data for more than 123,000 people, including names, dates of birth, and SSNs. The company says its investigation found no evidence of misuse, and no ransomware group has publicly claimed responsibility for the breach. #AmericanLendingCenter…

Microsoft has disclosed CVE-2026-42897, a zero-day affecting Exchange Server Subscription Edition, 2016, and 2019, after it was observed in attacks. The flaw impacts Outlook Web Access and may allow spoofing and arbitrary JavaScript execution if a targeted user opens a specially crafted email, while Microsoft has released mitigation guidance pending a…

Microsoft disclosed mitigations for CVE-2026-42897, a high-severity Exchange Server spoofing flaw that can be exploited through specially crafted emails to execute arbitrary JavaScript in Outlook on the web. The company recommends enabling Exchange Emergency Mitigation Service or using the Exchange On-Premises Mitigation Tool until permanent patches arrive for Exchange Server 2016, 2019, and Subscription Edition. #Microsoft #ExchangeServer #CVE-2026-42897 #EEMS #EOMT

SecurityScorecard has acquired Driftnet to strengthen its third-party risk management platform with real-time Internet scanning and deeper threat intelligence. The move is meant to improve proactive breach detection as organizations face growing third-party exposure, AI-driven risk, and increasingly complex supply chains. #SecurityScorecard #Driftnet #TITANAI #HyperComply

TeamPCP has released the source code for its Shai-Hulud worm on GitHub, making it easier for other threat actors to launch copycat supply chain attacks. Researchers say the open-sourcing effort, along with a BreachForums challenge, is likely to trigger more variants and a sustained spike in attacks against developer and cloud…

A highly sophisticated threat actor, tracked as UAT-8616, is exploiting CVE-2026-20182, an authentication bypass flaw in Cisco Catalyst SD-WAN Controllers that can lead to administrative access and root compromise. Rapid7 and Cisco Talos warn that the bug has already been used in the wild, with attackers adding SSH keys, changing NETCONF settings, and targeting high-value organizations and critical infrastructure sectors. #CVE-2026-20182 #CiscoCatalyst #UAT-8616 #CiscoTalos #Rapid7

Researchers found malicious code in node-ipc versions 9.1.6, 9.2.3, and 12.0.1 that steals developer and cloud credentials, fingerprints the host, and exfiltrates data to a command-and-control domain. The campaign uses obfuscated payloads, DNS-based evasion, and background child processes to quietly continue stealing secrets from affected systems. #nodeipc #sazurestaticprovidernet #Socket #StepSecurity…

Cisco has released updates for CVE-2026-20182, a maximum-severity authentication bypass in Catalyst SD-WAN Controller and Manager that has already seen limited exploitation. The flaw can let a remote unauthenticated attacker gain administrative access, manipulate SD-WAN network configuration, and is linked to similar issues previously observed in CVE-2026-20127 and activity by UAT-8616….

CISA has added CVE-2026-20182, a critical authentication bypass in Cisco Catalyst SD-WAN Controller and Manager, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Cisco links the attacks to UAT-8616 and says multiple threat clusters are using proof-of-concept exploits to deploy web shells, miners, backdoors, and credential stealers on affected…

Pwn2Own Berlin 2026 opened with $523,000 in cash awards after researchers demonstrated 24 unique zero-days across Microsoft Edge, Windows 11, Red Hat Linux, NVIDIA software, and multiple AI and enterprise platforms. The event continues at OffensiveCon as teams target products from Microsoft, Apple, Google, OpenAI, Anthropic, and Mozilla, with vendors given 90 days to patch disclosed flaws. #Pwn2OwnBerlin2026 #MicrosoftEdge #Windows11 #RedHatLinux #NVIDIAContainerToolkit #OpenAI #AnthropicClaudeCode #MozillaFirefox

OpenAI said two employees’ devices were breached in the Mini Shai-Hulud supply-chain campaign, which spread malicious packages through npm and PyPI and triggered a precautionary rotation of code-signing certificates. The company said customer data, production systems, and deployed software were not impacted, while the broader attack also hit TanStack, Mistral AI, UiPath, Guardrails AI, and OpenSearch. #OpenAI #MiniShaiHulud #TeamPCP #TanStack #MistralAI #UiPath #GuardrailsAI #OpenSearch