Pwn2Own Automotive 2026 in Tokyo awarded security researchers $1,047,000 after they exploited 76 zero-day vulnerabilities across in-vehicle infotainment systems, EV chargers, and car operating systems. Team Fuzzware.io topped the leaderboard with $215,000, followed by Team DDOS and Synactiv, and vendors have 90 days to patch reported zero-days before public disclosure. #Pwn2OwnAutomotive2026 #Fuzzwareio
Category: Cyber Security News
Microsoft confirmed that Outlook for iOS version 5.2602.0 can crash or freeze on iPad devices due to a coding error introduced when feature flags were changed to refresh rather than restart tabs (incident EX1220516). Affected users can launch Outlook in Airplane Mode as a workaround while Microsoft rolls out a fix that may take up to 24 hours to reach the App Store; related Exchange Online and Windows update incidents are also being addressed. #Outlook #ExchangeOnline
CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after finding evidence of active exploitation, affecting Vite, Versa Concerto, eslint-config-prettier, and Synacor Zimbra Collaboration Suite. BOD 22-01 requires Federal Civilian Executive Branch agencies to remediate KEV-listed CVEs by set deadlines, and CISA strongly urges all organizations to prioritize timely…
Unknown attackers abused Microsoft SharePoint file-sharing links to phish credentials and take over corporate email accounts at multiple energy-sector organizations, then used those accounts to send hundreds of phishing messages to internal and external contacts. Attackers created inbox rules, deleted evidence, and could persist by tampering with MFA and access controls,…
Custom voice-phishing kits sold on dark web forums and messaging platforms provide real-time, phone-assisted tools that help criminals intercept credentials and multi-factor authentication codes for Google, Microsoft, and Okta accounts. These “impersonation-as-a-service” offerings mimic authentication flows, forward harvested credentials (often via Telegram), recruit native-English callers for helpdesk scams, and have enabled…
Germany has expelled a Russian diplomat accused of spying in connection with the war in Ukraine, after prosecutors linked embassy contacts to alleged intelligence operations. Media identified the diplomat as Andrei Mayorov and authorities say suspect Ilona Kopylova collected information on military aid, drone testing sites and the arms industry; #AndreiMayorov…
Microsoft warns that threat actors are abusing SharePoint links in a multi‑stage phishing campaign targeting energy organizations, using adversary‑in‑the‑middle (AiTM) techniques to capture Microsoft credentials. Attackers then performed business email compromise by taking over inboxes, hiding and deleting messages, and distributing further phishing URLs, requiring remediation that includes session revocation and…
This week’s roundup compiles a range of cybersecurity developments, from massive GDPR fines and law enforcement actions to newly disclosed exploit techniques and product security advisories. Highlights include Mandiant’s Net-NTLMv1 rainbow tables release, an Interpol Red Notice for Black Basta leader Oleg Nefedov, Cloudflare WAF bypasses, Snap Store account hijacks, and…
Fortinet confirmed that recent attacks are bypassing FortiCloud single sign-on authentication even on devices patched against CVE-2025-59718 and CVE-2025-59719. Attackers automate configuration changes on FortiGate devices to add accounts, enable VPN access, and exfiltrate configuration files, prompting Fortinet to share IOCs and recommend disabling FortiCloud SSO and restricting administrative access. #FortiCloud…
The third week of 2026 saw active exploitation of a supposedly patched FortiOS 7.4.9 vulnerability alongside continuing ransomware breaches that exposed sensitive data at major organizations. Rising hacktivist attacks on industrial and government systems and new EU rules to phase out high-risk non-EU telecom products highlight the need for integrated technical…
Fortinet confirmed it is working to fully address a critical FortiCloud SSO authentication bypass (CVE-2025-59718) after admins reported fully patched FortiGate firewalls being compromised. Security firms observed automated attacks that created VPN-enabled admin accounts and stole firewall configurations within seconds, and Fortinet advised restricting admin access and disabling FortiCloud SSO while a fix is developed. #Fortinet #CVE-2025-59718
Two Venezuelan nationals, Luz Granados and Johan Gonzalez-Jimenez, were convicted of ATM jackpotting using malware and will be deported after serving sentences and paying restitution. Authorities linked the scheme to the decade-old Ploutus malware and a broader campaign associated with the Tren de Aragua syndicate. #Ploutus #TrenDeAragua…
Threat actors began exploiting an authentication bypass in SmarterTools SmarterMail roughly two days after patches were released, allowing unauthenticated password resets of administrator accounts and takeover of vulnerable instances. The flaw (CVE-2026-23760) can lead to full remote code execution via the Volume Mount Command and has seen widespread exploitation after the…
Manage My Health has contained a late‑2023 cyberattack that accessed documents in its “My Health Documents” feature and has notified most potentially affected users. The company warns fraudsters are impersonating the patient portal to send phishing messages while it works with regulators, the High Court, and partners like IDCARE to monitor…
GitLab released patch updates 18.8.2, 18.7.2, and 18.6.4 for Community and Enterprise Editions to remediate multiple security vulnerabilities and stability issues, and administrators of self-managed instances are strongly advised to upgrade immediately. The updates fix several high-severity flaws including CVE-2025-13927 (Jira Connect DoS), CVE-2025-13928 (Releases API DoS), and CVE-2026-0723 (2FA bypass),…