Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool GitHub Actions have been disabled for a second time after...

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Ravie LakshmananSep 25, 2026Malware / Social Engineering Cybersecurity researchers have flagged a new version of PamStealer that ensures that the...

The SOC Doesn’t Need to Start Over with Every Alert

Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and...

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise

Ravie LakshmananSep 25, 2026Cryptocurrency / Cybercrime Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its...

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Ravie LakshmananSep 25, 2026Vulnerability / Email Security The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail...

Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data

Swati KhandelwalSep 25, 2026Cloud Security / Vulnerability A flaw in Cloudflare Containers let a paying customer read data that other...

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Ravie LakshmananSep 25, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical...

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

September 24, 2026

Swati KhandelwalSep 24, 2026Vulnerability / Mobile Security A OnePlus 15 running the latest OxygenOS can be rooted by a malicious...

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

September 24, 2026