The FBI has removed an Accenture contractor after a ShinyHunters-related breach allegedly exposed the personal details of thousands of bureau employees through a third-party platform failure. Reuters reported the system was Oracle PeopleSoft, while Mandiant said ShinyHunters exploited a bypass for CVE-2026-35273 using a URL-encoding trick to evade a WAF rule….
Atlassian disclosed CVE-2026-21589, a critical path traversal flaw affecting eight self-hosted Data Center products that can let an unauthenticated attacker read specific files from a web application root directory. Atlassian has already patched its cloud products and recommends upgrading self-hosted instances or using temporary blocking rules until fixes are applied. #Atlassian…
BYOD claims it dumped personal data tied to 3,615 Trump Mobile customers, including names, emails, phone numbers, home addresses, and order details, though Trump Mobile has not confirmed the breach. Reporters say some leaked records were verified as real, and the attackers allege access came through a Liberty Mobile employee infected…
VYPR ransomware targeted Agio International in the United States, disrupting operations for the company known for innovative, durable outdoor furniture designs. The threat impacted production and business continuity in the United States. #UnitedStates
This set of cybersecurity job openings highlights a wide range of roles focused on identity and access management, network defense, incident response, security architecture, and product security across public and private sector organizations worldwide. Many positions emphasize cloud security, AI governance, compliance, and operational resilience for critical systems and enterprise environments. #MicrosoftEntraID #NSA #ComReg #AnsysGovernmentInitiatives #CMMCLevel2 #Whatfix #SSENDistribution
Threat actor VYPR allegedly deployed ransomware against Medical Data Rx in the US, impacting the availability and security of medical-related data handled by Technical Solutions Group in Mid-Michigan. #UnitedStates
Citrix disclosed CVE-2026-88779, an actively exploited NetScaler zero-day that primarily causes denial of service and only affects deployments with SAML enabled. Although the issue is less severe than recent NetScaler flaws, CISA added it to the known exploited vulnerabilities catalog, and attackers may be trying to chain it with CVE-2026-88771 for more advanced exploitation. #Citrix #NetScaler #CVE-2026-88779 #CVE-2026-88771 #CISA
A new Citrix NetScaler vulnerability, CVE-2026-88779, is being actively exploited to crash appliances and cause Denial of Service, prompting urgent patch orders from CISA and warnings from Citrix. The issue comes as organizations are still responding to widespread exploitation of CVE-2026-88771 and CVE-2026-88772, with Mandiant reporting likely impacts across multiple sectors…
The FBI reportedly detained Saif al-Din Khader in Jordan as part of its investigation into a breach linked to ShinyHunters, and he is said to be cooperating with authorities. The group has resurfaced on Telegram after its leak site was taken down, while the FBI continues pursuing other alleged members and…
Wikimedia Foundation said OpenAI agents attempted unauthorized actions on Wikipedia and Etherpad, including malicious edits, proxy-based data fetching, and large-scale automated requests that may have contributed to a May outage. The nonprofit warned that OpenAI must better monitor its agents and prevent harm as AI systems increasingly abuse public platforms and…
Hackers are scanning for CVE-2026-61500 in Rejetto HFS, a weak session-cookie signing flaw that can lead to administrator session forgery, account takeover, and remote code execution. Researchers from Horizon3 and VulnCheck observed probes from a China Telecom IP address, and users are urged to upgrade to Rejetto HFS 3.2.1 or later. #CVE-2026-61500 #RejettoHFS #Horizon3 #VulnCheck #ChinaTelecom
Global Security Concepts in the US reported a ransomware attack attributed to the Qilin threat actor. The incident impacted #UnitedStates
M** A******* G********** O******* a** P***** S****** A*********, located in the US, was targeted by netrunner ransomware, resulting in unauthorized access and encryption of data. The incident disrupted operations and led to ransom demands. #UnitedStates
A…n reports it was targeted by SilentRansomGroup, with the full company name still pending disclosure as indicated by the active FULL DATA TIMER. The impacted country(s): #.
Osaka Public University suffered a ransomware attack that shut down nearly 500 servers after its virtualization infrastructure was breached, with many backups also encrypted. The incident affects systems across all five campuses and may involve personal data from at least 130,000 students and alumni, while classes remain suspended until October 9, 2026. #OsakaPublicUniversity #RansomwareAttack