Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Ravie LakshmananSep 05, 2026Vulnerability / Server Security Broadcom has released security updates for two security flaws impacting VMware Workstation and...

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers’ Data It Said Was Deleted

Ravie LakshmananSep 05, 2026Data Breach / Vulnerability Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the...

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about...

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Ravie LakshmananSep 05, 2026Vulnerability / Web Security Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft...

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of...

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary...

New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean...

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Ravie LakshmananSep 04, 2026Vulnerability / Web Security Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms...

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws