Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access...

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

Ravie LakshmananOct 06, 2026 The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role...

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and...

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in...

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes

Ravie LakshmananOct 05, 2026Vulnerability / Email Security Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft...

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic,...

The Credential Layer Is Expanding Faster Than Security Teams Can See It

Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and...

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Ravie LakshmananOct 05, 2026Vulnerability / Malware Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting...

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access