Oracle on Tuesday announced the release of 673 new security patches as part of its September 2026 Critical Security Patch Update (CSPU). The security updates appear to resolve more than 800 vulnerabilities: there are 672 unique CVEs in the 17… Read More "Oracle Patches 800+ Vulnerabilities in September 2026 Security Update"
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
Ravie LakshmananSep 16, 2026Vulnerability / API Security A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of… Read More "Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens"
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Ravie LakshmananSep 16, 2026Vulnerability / Web Security Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. “This vulnerability can be leveraged by unauthenticated attackers to… Read More "Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells"
Hundreds of OpenAI agents attack RubyGems platform
“Once the AIs got arbitrary RCE on the build environment, they would sometimes use the build environment to attempt to steal other users’ API keys, though we are unsure if they succeeded or not,” the RubyGems post said. “The agents… Read More "Hundreds of OpenAI agents attack RubyGems platform"
Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?
Millions of students every day turn to AI chatbots for help with schoolwork, emotional support and personal advice — often unaware of where their conversations and other personal information end up. How that data is used — and schools’ role… Read More "Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?"
Critical Cisco Secure Email Gateway zero-day gives attackers root access
If exploitation is suspected on physical devices, Cisco recommends contacting the Cisco Technical Assistance Center. For virtual devices, customers are advised to save all forensic information then deploy a new instance with rebuilt configuration and rotated credentials. Devices that are… Read More "Critical Cisco Secure Email Gateway zero-day gives attackers root access"
“We Think the Security Control Is Working” Is No Longer Good Enough
Security, risk, and control assessments are typically done for the sake of compliance: tools deployed, audits passed, workflows completed, boxes checked. That’s no longer enough for boards, customers, and regulators, who all want an answer to a harder question: ‘can… Read More "“We Think the Security Control Is Working” Is No Longer Good Enough"
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has… Read More "KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens"
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran’s intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the… Read More "Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists"
Exein Secures $270M at $1.7B Valuation for Physical AI Security
IoT cybersecurity startup Exein today announced raising $270 million in an oversubscribed funding round that brings the total raised to over $600 million and its valuation to $1.7 billion. The investment round was led by Headline, with participation from Sofina,… Read More "Exein Secures $270M at $1.7B Valuation for Physical AI Security"