WordPress released security patches in version 7.1.1 to fix a core flaw that could let a logged-in administrator be tricked into automatically installing a theme from WordPress.org through a crafted link. Researchers at pwn.ai named the attack chain Click2Shell and showed it could be paired with a separate theme flaw, such…
A security researcher published working exploit code for four Linux kernel flawsâDirtyAH6, TUNderflow, PPPoEject, and DiagSpillâthat can let a local attacker gain root on unpatched systems. The bugs have already been fixed in the Linux kernel, but older kernels remain at risk until they are updated, especially on systems using unprivileged…
The Pays de L’Aigle Community of Communes, the CIAS, and the Tourist Office were hit by an intrusion into their email server, potentially exposing personal data such as email addresses and message contents. Authorities including the gendarmerie, CNIL, and ANSSI were alerted, and temporary security measures were put in place while users were advised to change their passwords. #PaysdeLAigle #CNIL #ANSSI
UCSal was hit by a cyberattack involving Wallstreet Ransomware, which disrupted the Software Engineering schoolâs laboratories and threatened to leak SQL databases containing student and faculty data. The university said it contained the unauthorized access, but network instability and security measures forced the postponement of some academic activities. #UCSal #WallstreetRansomware
Viação Ăguia Branca detected a cybersecurity incident on its ticket sales websites, with an internal investigation indicating that the data of 7,883 customers may have been compromised. The company notified affected customers and Brazilâs ANPD, stressing that the impact was limited and did not affect the app, Zap Passagens, or already issued tickets. #ViaçãoĂguiaBranca #ANPD
AuditTeam allegedly deployed ransomware against kit-e.jp in Japan but reports indicate no data breaches occurred. The incident is claimed to have impacted #Japan
Premier Lighting & Controls, a full-service commercial lighting agency in the US, was targeted by the Gammax ransomware group. The incident disrupted operations and impacted the organization in #UnitedStates
N0n ransomware claims Inter (Venezuelaâs largest ISP) in Venezuela was compromised, asserting access to 15.3 million+ subscriber connection records, tens of thousands of contacted subscriber addresses, and a complete internal network map across regional operations. The threat also alleges severed network traffic and states services remain interrupted until settlement. #Venezuela
Microsoft has fixed a known issue that caused Windows Security to wrongly report that Microsoft Defender Antivirus was turned off after recent updates. The bug affected supported Windows client and server versions, including Windows 11 26H1 and Windows Server 2025, and was resolved in Defender Antivirus update version 4.18.26080.4 released on September 17. #MicrosoftDefenderAntivirus #WindowsSecurity #Windows11 #WindowsServer2025
BleepingComputer and Material Security will host a live webinar on September 23, 2026 to examine real Google Workspace breaches and identify the controls that matter most for fast-growing companies. The session will focus on attacks that used social engineering and malicious OAuth applications, plus practical response lessons from the first hours after compromise. #GoogleWorkspace #MaterialSecurity #RajanKapoor #RickFitzgerald #BleepingComputer #OAuthApplications
Microsoft Teams will soon let administrators customize the file extensions blocked by Weaponizable File Protection, giving organizations more control over which attachments are treated as high-risk. Microsoft is also adding several other Teams security features to help defend against phishing, fraud, external bots, and social engineering attacks. #MicrosoftTeams #WeaponizableFileProtection #Defender #phishing #guestinvitations
Cloud collaboration in Microsoft 365 makes sharing easy, but that convenience also creates major visibility and governance gaps for sensitive data. Dedicated Identity & Access Governance tools like tenfold help close those gaps by centralizing reporting and streamlining access reviews across Teams, OneDrive, and SharePoint. #Microsoft365 #SharePoint #OneDrive #Teams #tenfold
Helpfeel says hackers breached Gyazo servers through a vulnerability in its image upload server on September 11 and accessed a database containing about 23.6 million user records. The incident also exposed roughly 490 million image metadata records and a list of private images, though payment card information was not compromised. #Helpfeel…
Hacktron used Claude to develop an exploit for a libheif flaw in Discourse, then chained it with an OpenAI sign-in token issue to take over employee ChatGPT and Codex accounts. The researchers briefly reached internal GitHub resources before stopping, and OpenAI later narrowed Community sign-in token permissions and revoked affected sessions….
SecurityWeekâs weekly roundup covers major cybersecurity developments, including new AI agent risks, active exploitation of software flaws, and law enforcement actions against cybercrime networks. It also highlights urgent fixes for SAP, WordPress, TP-Link, and AI coding tools, along with research on cloud token theft and plugin takeover techniques. #Raindrop #Mandiant #PhantomRaven…