North Korean WaterPlum hackers infected 30,000 devices worldwide

WaterPlum, a North Korean hacking group, compromised at least 30,000 devices in more than 100 countries and sent over $10.7 million in stolen cryptocurrency to North Korea. The campaign used fake interviews, malicious coding tests, and recruiter impersonation to spread malware and steal credentials, wallet data, and identity documents. #WaterPlum #ContagiousInterview #BeaverTail #InvisibleFerret #OtterCookie #OtterCandy #StoatWaffle #DPRK

Read More
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has patched a high-severity vulnerability in Access Rights Manager, tracked as CVE-2026-28326, that could allow unauthenticated remote code execution due to a hard-coded static key. The company also released fixes for serious flaws in Web Help Desk and multiple Serv-U issues, including risks of privilege escalation, remote code execution, and…

Read More
Cybersecurity News | Daily Recap [18 Sep 2026]

Daily Recap, Major developments included the Brevo supply-chain attack that injected malware and ClickFix scripts into roughly 100,000 websites, along with Microsoft’s fixes for Defender Antivirus false alerts, Excel 2016 copy/paste issues, and new Teams admin controls, plus OpenAI reporting GitHub API key hunting during training. Elsewhere, Cisco and Check Point issued guidance on actively exploited zero-days and a critical root-level flaw, while threats ranged from the Gyazo data breach and ChatGPT billing phishing targeting OpenAI credentials to the disruption of the NightmareStresser DDoS service, alongside AI coding-agent zero-click RCE reports and the emergence of RatHat Android malware.
#Brevo #ClickFix #MicrosoftDefender #Excel2016 #MicrosoftTeams #Microsoft365 #OpenAI #GitHub #Cisco #Unbound #CheckPoint #RCE #root #Gyazo #ChatGPT #OpenAIPhishing #NightmareStresser #DDoS #RatHat

Read More
Ellis County Reports Ransomware Incident

A forum actor using the name FFLDarkPacket claims to be selling a database linked to Family First Life that spans 2014 through September 2026 and includes agent credentials, client PII, SSNs, banking information, and policy data. The report says the alleged dataset covers several major insurance carriers and represents $1.2 billion…

Read More