Malware & Exploits

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

September 26, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users. “The attack chain begins with a fake CAPTCHA page and…
The Hacker News
Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem

September 26, 2026

Botnets & C2, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Ransomware, Threat Intelligence

Exploit.in data shows how a 2005 cybercrime forum helped shape today’s ransomware ecosystem, with users and practices surviving for decades. Ransomnews researcher Dancho Danchev dug up a database dump of Exploit.in covering its first three years, from February 2005 to May 2008, and the numbers inside it tell a story about Russian cybercrime that enforcement…
Security Affairs
Exploited
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

September 26, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could result in unauthenticated remote code execution. The vulnerability was first exploited as a zero-day…
The Hacker News
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

September 26, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery (CSRF) vulnerability, which has yet to be assigned a CVE identifier, carries a CVSS score of 8.8…
The Hacker News
Exploited
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

September 26, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Zero-Day Vulnerabilities, Threat Intelligence

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows – CVE-2026-65660 (CVSS score: 8.8) – A code injection vulnerability in Microsoft Office SharePoint…
The Hacker News
Exploited
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

September 26, 2026

Botnets & C2, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress Core flaw, tracked as CVE-2026-87902 (CVSS score of 9.2), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-87902 allows an unauthenticated attacker to make the get_page_template() function include a…
Security Affairs
3 Consulting Myths Debunked by Unit 42 Experts

September 25, 2026

Malware & Exploits, Threat Intelligence

Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses.
Unit 42
Exploited
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

September 25, 2026

Botnets & C2, Enterprise & Cloud Security, Malware & Exploits, Microsoft Security, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft SharePoint and Mikrotik RouterOS flaws flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-65660 is a code-injection vulnerability in Microsoft SharePoint Server that allows an authenticated, low-privileged attacker…
Security Affairs
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

September 25, 2026

Data Breaches, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Ransomware, Threat Intelligence

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.
BleepingComputer
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

September 25, 2026

AI Attacks & Abuse, Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, AI & Emerging Technology, Threat Intelligence

When autonomous AI agents “escape the sandbox,” the real story isn’t rogue machines — it’s the same access-control failures we’ve seen for decades.
Dark Reading
Elementor WordPress flaw lets attackers create admin accounts

September 25, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts.
BleepingComputer
What We Missed: Google Gemini Joins the AI Escape Party

September 25, 2026

AI Attacks & Abuse, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.
Dark Reading

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

3 Consulting Myths Debunked by Unit 42 Experts

U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

Elementor WordPress flaw lets attackers create admin accounts

What We Missed: Google Gemini Joins the AI Escape Party

Stay ahead in Cyber Security.

Your basket (items: 0)