Category: Cyber Security News

Authorities extradited Sergei Anatolyevich Filimonov from Georgia over an alleged bank-account takeover scheme that targeted victims through spoofed bank domains and stole more than 5,000 login credentials. Prosecutors say the operation attempted to divert millions from two banks, with alleged losses exceeding $6.3 million and possible attempted losses far higher. #SergeiAnatolyevichFilimonov #NorthernDistrictOfGeorgia #FBI #Atlanta #Cumming

The U.S. government says Chinese AI firms are running a systematic campaign to distill capabilities from frontier U.S. models, using billions of tokens and millions of exchanges since late 2024. The advisory names DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI, and says the companies used the resulting data to strengthen domestic models while trying to avoid detection. #DeepSeek #MoonshotAI #Alibaba #MiniMax #StepFun #ZAI #Claude #ChatGPT #Gemini #Grok

Microsoft’s September 2026 Patch Tuesday is its largest ever, fixing 966 flaws and two actively exploited zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows ALPC. The update spans major products including Windows, Office, SQL Server, Exchange Server, Entra ID, Azure services, and Microsoft Edge, with 105 Critical vulnerabilities addressed overall. #WindowsUpdateStack #WindowsALPC #EntraID #MicrosoftExchangeServer #MicrosoftOffice #SQLServer #MicrosoftEdge

Microsoft has released Windows 10 KB5122878 for ESU and Enterprise LTSC users, bringing September 2026 Patch Tuesday security fixes and several bug fixes. The update advances systems to build 19045.7725 or 19044.7725 and includes corrections for Secure Boot, Morocco Standard Time, OMA DM logging, Windows Code Integrity policies, Remote Desktop audio redirection, and a BitLocker Group Policy issue. #Microsoft #Windows10 #KB5122878 #PatchTuesday

Sophos uncovered a Linux rootkit in F5 BIG-IP APM environments that intercepts PHP loading and injects a fileless web shell directly into memory, keeping malicious code off disk. The malware appears to be a second-stage payload likely tied to CVE-2025-53521 and is also identified by ESET as PoisonedRefresh. #PoisonedRefresh #F5BIGIPAPM #CVE-2025-53521

The article explains how a suspicious vulnerability disclosure to an open source maintainer illustrates the same visibility and reporting challenges that many software vendors will face under the EU Cyber Resilience Act. It argues that companies must know what shipped, when they learned of vulnerabilities, and how quickly they can prove it before the CRA’s reporting clock begins. #EUCyberResilienceAct #ENISA #ActiveState

DoppelCart is a massive fake e-shop operation spanning more than 119,000 domains, with over 105,000 shops still active and used to steal payment card details through cloned storefronts. The campaign imitates 44,182 brands, some with real support details and deep checkout-page data theft, making it the largest publicly documented fake-shop cluster by domain count. #DoppelCart #BogusBazaar #Nebty #BenediktScheungraber

SAP’s September 2026 security updates fix 20 vulnerabilities, including CVE-2026-44756 (OVERPASS), a maximum-severity SAP Kernel memory corruption flaw that can let attackers run commands with administrative privileges and fully compromise SAP hosts. SAP also patched CVE-2026-58240 (S4GET) in the NetWeaver Message Server, a missing-authentication flaw that can expose entire SAP clusters to remote code execution. #CVE-2026-44756 #OVERPASS #CVE-2026-58240 #S4GET #SAPKernel #SAPNetWeaver #SAPICM

Microsoft says the August 2026 security update can cause 0xc0000409 errors on Windows Server 2016 systems when the Compatibility Appraiser diagnostic service is enabled, leading to recurring CompatTelRunner.exe crashes. The issue affects physical and virtual machines, including VMware and Azure environments, and Microsoft plans to address it in a future update. #Microsoft #WindowsServer2016 #CompatTelRunner.exe #CompatibilityAppraiser #VMware #Azure

OpenAI is investigating an ongoing outage that is causing ChatGPT image generation errors and file upload delays, with users reporting freezes, failed prompts, and unavailable uploads. The company says it is applying mitigations while continuing to assess elevated failures affecting ChatGPT and the Images API. #OpenAI #ChatGPT #ImagesAPI

ShinyHunters claims it breached Florida’s DAVID driver database and stole more than 200,000 records, using a password-reset flaw to access multiple accounts and exfiltrate driver data. The group posted FLHSMV on its leak site and used Jeffrey Epstein’s DMV record as proof while also hinting at more DMV breaches to come. #ShinyHunters #DAVID #FLHSMV #JeffreyEpstein

Microsoft has released Windows 11 KB5124008 and KB5122880 as mandatory cumulative updates for 25H2/24H2 and 23H2, delivering September 2026 Patch Tuesday fixes for 1,000 vulnerabilities along with bug fixes and new features. The update adds taskbar, Start menu, Windows Search, File Explorer, and system improvements, and can be installed through Windows Update or the Microsoft Update Catalog. #KB5124008 #KB5122880 #Windows11 #MicrosoftUpdateCatalog

Cylake has raised $245 million, bringing its total funding to $290 million, to accelerate development of its sovereign security platform for government agencies and highly regulated enterprises. Founded by Nir Zuk and other former Palo Alto Networks and SentinelOne executives, the company is building an AI-native platform designed to run on…

Alleged white-hat hackers returned 3,400 Bitcoin after a theft from the Liquid Network sidechain that initially drained about 4,000 Bitcoin from its federation wallet. Blockstream and Liquid have paused network activity and are working with the attackers to fix the vulnerability, with roughly 598 Bitcoin still outstanding. #LiquidNetwork #Blockstream #Liquid #Bitcoin…

Hidden AI prompt injections are concealed instructions embedded in documents, metadata, emails, images, code repositories, and other content that autonomous agents ingest. Bowbridge warns that these attacks can cause agentic AI systems to exceed their intended behavior, misuse privileges, or exfiltrate sensitive data, making prevention and pre-scan defenses critical. #Bowbridge #AgenticAI…