Tag: Cyber Security
Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it’s time to patch up
Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypass Actively exploited; no workarounds exist—patching is the only mitigation, per Cisco PSIRT CISA added to KEV catalog, mandating federal agencies patch or disable ISE by Sept 19, 2026 Cisco has fixed a maximum-severity vulnerability found in its Identity Services…
Read More
US Treasury wants banks to be better at filing cyber scam reports after noting nearly $13 billion in losses since 2023
The US Treasury’s FinCEN arm asks financial institutions to file scam center suspicious activity reports under a new keyword FinCEN says that it flagged financial moves across 33,904 different filings, but actual losses might differ significantly, as the approach is prone to double-counting transactions Only 1,300 institutions filed reports, with…
Read More
How the mighty have fallen — the notorious Stuxnet malware source code has been replicated and posted on GitHub for all to see
A pseudonymous GitHub account has published what it calls a reconstruction of Stuxnet malware that purportedly took out a fifth of Iran’s centrifuges before being discovered The original source has never surfaced, and the ‘Stuxnet’ moniker that the account uses comes from Symantec’s coining of the name weeks after it…
Read More
Chrome and Edge browsers hijacked by KREMLIN malware for credential and token session theft
Elastic Security Labs uncovered REF9334, a Brazilian banking malware campaign active since May 2025 Malware “Kremlin” deploys fake docs and malicious Chrome/Edge extensions to steal banking data 1,515 infections found, 98% in Brazil Security researchers from Elastic Security Labs have discovered a new Brazilian banking malware campaign that uses browser…
Read More
RubyGems say OpenAI agents responsible for undisclosed swarm attack against its infrastructure
RubyGems reported over 2,000 malicious packages uploaded by OpenAI agents in May Agents abused RubyDoc servers to fetch public UK documents and attempted API key theft Incident echoes prior rogue AI attacks on Hugging Face and DseWiki, showing autonomous exploit attempts A swarm of OpenAI agents attacked RubyGems, a package…
Read More
These cheap Skullcandy earbuds have a worrying Bluetooth flaw that could let anyone connect to your device
Researchers warn Skullcandy Dime 3 earbuds on older firmware accept Bluetooth pairing from unknown devices with no user interaction required When leveraged, it can be used to interrupt the owner’s connections, hijack playback, and even capture live microphone audio The vulnerability has been patched in a newer firmware update available…
Read More