Security News

Live news from trusted publications, matched against DayBreach CVE data.

The Cyber Express7 days ago

Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe

Lembaga Tabung Haji (TH) has resumed its key systems and services after a Tabung Haji cyberattack on Oct 8 led to a temporary suspension, and the agency says depositors’ savings are safe. In a statement issued today, TH said the reactivation followed comprehensive security checks, the strengthening of controls and system recovery measures. The agency also said it worked with national cybersecurity authorities to address the threat and reinforce system security, so that the reactivated services can operate safely. TH has lodged a police report and continues to monitor its systems closely. Tabun

Related Companies

octobercms

Collabora

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express7 days ago

Two Face US Charges for Sextortion and Cyberstalking in Puerto Rico

Two Dominican Republic nationals have been extradited to the United States to face charges over an alleged sextortion scheme that used social media to target victims in Puerto Rico, threaten exposure of sexually explicit images, and demand money. Patricia Joanna Almonte-Frías and her partner, Rineldys Feliciano Díaz-Cuevas, were extradited on September 30, 2026, after being arrested in the Dominican Republic on August 19 at the request of US authorities. The defendants face charges of conspiracy to cyberstalk and send interstate threats in the District of Puerto Rico, according to the US Depar

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express10 d ago

The Cyber Express Weekly Roundup: US Puts $10 Million Bounty on Chinese Hacker, Japan Moves to Hunt Hidden Attackers and More

This weekly roundup covers a massive exposure of personal data from Denmark's national population register, a U.S. bounty on a Chinese hacker accused of stealing COVID-19 research, Japan's plan to actively search for attackers hiding in its critical infrastructure, a pair of breaches at Japanese publisher Nikkei, a call for AI-driven decision-making in security operations, and a Massachusetts town's ongoing recovery from an August cyberattack. Two threads run through this week's stories. First, attackers keep getting in through doors that were already open: a company's lawful access to a gover

Related Companies

Ubiquiti Inc

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express10 d ago

Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8

Splunk has patched a large set of Splunk vulnerabilities in Splunk Enterprise, the most severe of which carries a CVSSv3.1 score of 9.8. The fixes are described in two advisories, SVD-2026-1001 and SVD-2026-1002, both published on October 7, 2026, and together they cover 22 CVE identifiers, CVE-2026-76264 through CVE-2026-76285. A security bulletin issued on October 9, 2026, rated the overall risk as medium and warned that a remote attacker could exploit some of the flaws to achieve remote code execution, denial of service, elevation of privilege, security restriction bypass, sensitive informa

Related Companies

splunk

linux

İlgili CVE'ler

CVE-2026-76264 CVE-2026-76285 CVE-2026-76268 CVE-2026-76266 CVE-2026-76265 CVE-2026-76272 CVE-2026-76280 CVE-2026-76269 CVE-2026-76275 CVE-2026-76270+12 more CVEs

Read at the source

The Cyber Express10 d ago

How Fake Journalists Got Iranian Articles Into Real Outlets

Two covert influence operations, one from Russia and one from Iran, used ChatGPT not to invent new tactics but to speed up old ones. That is the central finding of a new OpenAI threat report, which describes banning both networks after tracing how they built false-front entities to push geopolitical, conflict-related messaging into target audiences. The report frames the activity as a return to pre-AI playbooks. The Iranian network's personas resemble "Alice Donovan," a front for Russian military intelligence whose articles appeared in Western outlets in 2016-17. The Russian network's use of u

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express10 d ago

Andover Confirms Cyberattack Reached Its Systems, Investigation Continues

An attacker got into some of Andover's computer systems during the Andover cyberattack in August; Town officials confirmed Thursday, though they cannot yet say whether any data was taken. "The Town has identified unauthorized access to certain systems and is continuing to determine the nature, scope, and sensitivity of any data that may have been accessed or acquired," Chief Communications Officer Phil Geoffroy said in written answers to Andover News. Some reviewed material appears routine or publicly available, he said, but the full data set remains uncharacterized. What Is Known About the An

Related Companies

Andover

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express10 d ago

FBI Takes Down China-Linked Tools That Scanned US Utilities

The U.S. Justice Department and FBI have seized two hacking tools, Microscan and FishHub, that court documents say were operated and used by Flax Typhoon actors working for a China-based company. According to the government, the tools were used to scan, and in some cases hack, U.S. and foreign critical infrastructure systems and other networks. The court-authorized seizures were announced alongside court documents unsealed in the Western District of Pennsylvania. Prosecutors allege the actors worked for Integrity Technology Group (Integrity Tech), a company based in the People's Republic of Ch

Related Companies

vmware

takes

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express11 d ago

Hacked Social Media Photos Sold Online: FBI Takes Down the Site

Law enforcement agencies in the United States and France have seized two CSAM domains linked to NudeLeaksTeens (NLT), a website that advertised hacked and stolen sexually explicit images and videos of young women and girls for sale. French authorities simultaneously arrested a 25-year-old man in Northern France suspected of being the site's main administrator. The action was announced by the U.S. Attorney's Office for the Eastern District of Virginia (EDVA), the FBI Washington Field Office, and the Cybercrime Division of France's Parquet de Paris. It was carried out under Operation Inevitable,

Related Companies

Collabora

microsoft

takes

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express11 d ago

US Puts $10 Million Bounty on Chinese Hacker Accused of Stealing COVID Research

The U.S. Department of State's Rewards for Justice (RFJ) program is offering up to $10 million for information on Zhang Yu, a Chinese national accused of hacking COVID-19 research at U.S. universities on behalf of China's Ministry of State Security (MSS). U.S. officials also describe Zhang as a key figure in the HAFNIUM hacking campaign, which compromised thousands of computers worldwide. His alleged partner, Xu Zewei, was arrested in Italy in July 2025 and extradited to the United States in April 2026. Zhang remains at large. Who Is Zhang Yu Zhang is a director at Shanghai Firetech Informatio

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Cyber Express12 d ago

Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products

Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting Confluence Data Center and seven other self-managed products. The advisory, published on October 5, 2026, warns that every version of the affected software is exposed and urges administrators to act right away, either by upgrading or by putting temporary safeguards in place. Beyond Confluence Data Center, the flaw reaches Bitbucket Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. Atlassian is tracking the issue

Related Companies