Threats & Breaches

47+ min ago   (99+ words) A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service, according to a recent report by The Hacker News. The redirection mechanism excludes a hardcoded list…...

17+ hour, 59+ min ago   (331+ words) Microsoft's big September 2026 Patch Tuesday update addressed a record 966 flaws, including two actively exploited zero-day vulnerabilities, across Microsoft products when it was released last week on Sept. 8. However, just one week later on Sept. 14, Microsoft rolled out an emergency, out-of-band…...

9+ hour, 25+ min ago   (1555+ words) Microsoft Patches 973 CVEs, Claude Agents Automate Attacks, China Chains Chrome Zero-Day, Cisco FMC Exploited & More. Welcome to this week’s edition of the GBHackers cybersecurity newsletter your weekly cybersecurity bulletin covering the 50 most important stories from September 7–12, 2026. AI ran through the…...

6+ hour, 9+ min ago   (1642+ words) Before touching any installers, confirm you have the following. Skipping this step is the single most common cause of a broken antivirus install, according to the troubleshooting pattern seen across vendor support forums. Most Windows 11 PCs already have Microsoft Defender…...

5+ hour, 4+ min ago   (319+ words) Developed by the Australian Signals Directorate’s Australian Cyber Security Center in cooperation with the US Cybersecurity and Infrastructure Security Agency and National Security Agency, the guidance also includes contributions from the Canadian Center for Cyber Security, the UK National Cyber…...

17+ hour, 10+ min ago   (525+ words) Cisco is urging defenders to get out in front of a highly-dangerous flaw in its Secure Email Gateway (SEG) appliance, CVE-2026-76461 that could enable an unauthenticated, remote attacker to gain the ability to execute arbitrary commands with root privileges. Listed…...

1+ hour, 12+ min ago   (245+ words) Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the device by simply sending malicious crafted emails to users. The flaw was already being exploited in the wild…...

1+ hour, 14+ min ago   (131+ words) GovCIO Media & Research Department of Veterans Affairs EHR Rollout Tracker Who’s in Charge of AI at Top Federal Agencies How Tech Advancements Support Military, Veteran Healthcare Inside ASPR’s Efforts to Bolster Federal Health Cyber Resilience Bob Bastani, Senior Cybersecurity Advisor…...

2+ hour, 25+ min ago   (824+ words) GuardBreaker places safety-sensitive text inside malware comments to target AI analysis rather than execute malicious code. ESET linked the technique to UAC-0099 and a script that can deliver the MATCHBOIL loader. A failed AI analysis must not count as a…...

6+ hour, 29+ min ago   (529+ words) September 15, 2026 | Security intelligence By Field Effect Security Intelligence Team The vulnerability requires specific deployment and configuration conditions and primarily affects Vite instances that have been made accessible beyond the local host. Vite is a frontend development and build tool used…...