China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

Ravie LakshmananSep 17, 2026Artificial Intelligence / Vulnerability OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior"...

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9,...

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes,...

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Ravie LakshmananSep 17, 2026Vulnerability / Web Security Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine...

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

Ravie LakshmananSep 17, 2026Cybercrime / DDoS-for-Hire The U.S. Department of Justice (DoJ) on Tuesday announced the court-authorized seizure of internet...

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Ravie LakshmananSep 16, 2026Vulnerability / Web Security A critical security flaw in Issabel Framework, a web-based framework for the open-source...

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy...

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five...

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories