Dark Reading
SASE Converges Network & Security Into One Cloud Solution(opens the publisher's site in a new tab)
Enterprise computing is moving to the edge. Keeping it secure requires tactics far beyond putting up firewalls.
Security
Stories tagged security.
BleepingComputer
New RemControl Android banking malware targets users in Europe and Canada
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]
Dark Reading
EDR Evasion Stack Helps Process Injection Slip Past Defenses
A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.
Google Chrome Releases
Chrome for Android Update
Hello Everyone! We've just released Chrome 155 (155.0.8059.16) for Android to a small percentage of users. It'll become available on Google Play over the next few days. You can find more details about early Stable releases here. This release includes stability and performance improvements. You can…
IGN / GameSpot / PC Gamer / Kotaku
Steam game disables mods after facing its second Workshop malware outbreak this year
A self-replicating virus is once again wreaking havoc on People Playground.
Dark Reading
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.
ransomware.live
🏴☠️ Emperador has just published a new victim : OnTrac
OnTrac is a major last-mile e-commerce delivery company formed by the 2021 merger of LaserShip and OnTrac. It positions itself as a direct alternative to FedEx and UPS, offering coast-to-coast coverage, 7-day-a-week operations, and competitive rates to reach over 75% of the U.S. population. We hold…
The Record (Recorded Future)
UK regulator to investigate Pornhub parent company for alleged age verification failings
In May, Pornhub began using a new age assurance process to verify some users’ ages, according to an Ofcom press release. The new method relies on signals from Apple that suggest under 18s in the UK “may have completed Apple’s age checks,” the press release said.
American Banker (headlines)
Bank economists see continued growth, persistent inflation
The U.S. economy is expected to keep growing despite nagging inflation, according to the latest consensus report from the American Bankers Association's Economic Advisory Committee.
Actively exploitedCritical 80BleepingComputer
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]
Kubernetes / CNCF / Linux Foundation / Apache / OpenSSF / OSI / Eclipse
Security Slam 2026 – Fall Edition
The Open Source Security Foundation (OpenSSF) is partnering with the Cloud Native Computing Foundation (CNCF) Security Technical Advisory Group (TAG Security) to support the 2026 Security Slam at KubeCon + CloudNativeCon America.
CyberScoop
Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack
The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives. The post Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack appeared first on CyberScoop.
SecurityWeek
IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU Decoder
IonQ’s new single processor quantum error decoder minimizes the classical computing overhead in quantum error correction. The post IonQ Targets Quantum Error-Correction Bottleneck With Single-CPU Decoder appeared first on SecurityWeek.
The Record (Recorded Future)
No evidence of successful foreign meddling in 2024 election, spy agencies found
U.S. intelligence officials found no evidence that any foreign adversary successfully interfered in the 2024 presidential election, according to sources familiar with the findings of a classified assessment.
ransomware.live
🏴☠️ Barracuda has just published a new victim : Abtach Ltd.
Abtach Ltd. was renamed Intersys Ltd.—a Pakistani company engaged in fraud targeting the US. The company’s employees charged fees for services that did not actually exist. The company’s founder, Azneem Bilwani, was involved in the illicit trafficking of synthetic opioids and fentanyl analogues…
Canadian Centre for Cyber Security
Forcepoint security advisory (AV26-960)
Serial Number: AV26-960 Date: September 23, 2026 As of September 23, 2026, Forcepoint is affected by a vulnerability in the following product: Forcepoint Security Engine (NGFW) Versions 7.1.0 to 7.1.13 Versions 7.3.0 to 7.3.1 Version 7.33 Version 7.4.0 to 7.4.1 Version 7.5.0 The Cyber Centre…
Canadian Centre for Cyber Security
Dell security advisory (AV26-959)
Serial number: AV26-959 Date: September 23, 2026 As of September 21, 2026, Dell is affected by vulnerabilities in the following products: Dell Command Powershell Provider (DCPP) Prior to 2.10.2 Dell Command Monitor (DCM) Prior to 10.13.2 Dell Inventory Collector Client Prior to 15.0.0 The Cyber…
Google Chrome Releases
Early Stable Update for Desktop
The Stable channel has been updated to 155.0.8059.12/.13 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log. You can find more details about early Stable releases here. Interested in switching release…
Canadian Centre for Cyber Security
MikroTik security advisory (AV26-958)
Serial number: AV26-958 Date: September 23, 2026 As of September 22, 2026, MikroTik is affected by a vulnerability in the following product: RouterOS Prior to 7.25beta5 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they…
BleepingComputer
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]
Cybersecurity Dive
FBI probes cyberattack tied to third-party jobs portal
The potentially serious breach highlights the supply chain risks facing even the most sophisticated organizations.
CERT/CC
VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Overview Imprivata Enterprise Access Management (EAM), an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The product provides no supported mechanism to rotate its RSA key pair after deployment, meaning the…
ransomware.live
🏴☠️ Braincipher has just published a new victim : goldstarfinancial.com
[AI generated] N/A I don't have reliable, verified information about a specific company operating at "goldstarfinancial.com." There are multiple businesses that have used similar "Gold Star Financial" naming conventions in different jurisdictions (this is a fairly generic name used by mortgage…
CyberScoop
Pentagon cyber chief: The demand far exceeds supply
At DefenseTalks on Tuesday, Katie Sutton said the Pentagon now receives far more requests to use cyber operations than its forces can fulfill, eight years after gaining that authority. The post Pentagon cyber chief: The demand far exceeds supply appeared first on CyberScoop.
Canadian Centre for Cyber Security
NVIDIA security advisory (AV26-957)
Serial number: AV26-957 Date: September 23, 2026 As of September 22, 2026, NVIDIA is affected by vulnerabilities in the following products: Infrastructure Controller Versions 0 to 1.9 NeMo Speech Versions 0.0 to 2.9 The Cyber Centre encourages users and administrators to review the provided web…
The Hacker News
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads. According to Aikido, the list of…
SecurityWeek
Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios
The idea that AI could break away and work toward its own agenda is looking increasingly plausible to researchers and experts. The post Worries About an AI Internet Takeover Gain New Urgency Among Doomsday Scenarios appeared first on SecurityWeek.
Canadian Centre for Cyber Security
GitHub security advisory (AV26-956)
Serial Number: AV26-956 Date: September 23, 2026 As of September 22, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.17.0 Prior to 3.17.21 3.18.0 Prior to 3.18.15 3.19.0 Prior to 3.19.12 3.20.0 Prior to 3.20.8 3.21.0 Prior to 3.21.6 3.22.0 Prior to 3.22.1…
Canadian Centre for Cyber Security
Google Chrome security advisory (AV26-955)
Serial number: AV26-955 Date: September 23, 2026 As of September 22, 2026, Google published a security advisory to address vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 154.0.8037.57/.58 (Windows/Mac), and 54.0.8037.57 (Linux) The Cyber Centre…
Canadian Centre for Cyber Security
Ubiquiti security advisory (AV26-954)
Serial number: AV26-954 Date: September 23, 2026 As of September 22, 2026, Ubiquiti Inc is affected by vulnerabilities in the following products: Cloud Gateways Prior to 5.1.31 Dream Machines Prior to 5.1.31 Dream Routers Prior to 5.1.31 Dream Wall Prior to 5.1.31 Enterprise Firewalls Prior to…