Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 63BleepingComputer · 160CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 66DataBreaches.net · 29Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 54Security.NL · 300SecurityWeek · 65SentinelOne · 33The Cyber Express · 70TheCyberThrone · 55The Hacker News · 286The Record · 36Unit 42 · 45
The Cyber Express12 d ago

86,644 Firewalls in 194 Countries Breached With Stolen Passwords

The FBI and the U.S. Secret Service (USSS) have issued a joint cybersecurity advisory warning organizations about FortiBleed, an active global credential-compromise campaign targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory, published on October 6, 2026, cites SOCRadar data verifying more than 86,644 compromised devices across 194 countries. According to the advisory, the campaign exploits reused or leaked credentials and legacy SHA-256 password storage, allowing threat actors to harvest and crack authentication data at scale. Attackers continue to scan

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express12 d ago

Singapore Plans Major Changes to Port Rules After 30 Years

Singapore is preparing the most significant update to its port legislation in nearly three decades. A new MPA Amendment Bill would give the Maritime and Port Authority of Singapore dedicated powers over maritime cybersecurity, along with fresh authority to regulate drones, autonomous vessels and artificial intelligence. The Maritime and Port Authority of Singapore (Amendment) Bill was tabled for First Reading in Parliament this week. It seeks to amend the MPA Act, which was enacted in 1996 and has remained largely unchanged since. According to the MPA Amendment Bill, maritime operations have s

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

China-Linked Fire Ant Turned Cisco Routers, TACACS Servers Into Espionage Platforms

The China-nexus espionage group Fire Ant has moved from compromising virtualization platforms to implanting Cisco IOS XR routers and TACACS authentication servers. They are using them to capture traffic, harvest administrator credentials and suppress the logs defenders rely on, said researchers at Sygnia, an incident response firm. Researchers first documented Fire Ant in July 2025 for deep intrusions into VMware ESXi and vCenter environments. The new report describes the same actor operating a layer lower, in what researchers call the trust layer — the routers, authentication servers and Linu

Related Companies
A
apache logo
apache
D
d-link logo
d-link
A
asus logo
asus
C
cisco logo
cisco
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

Boston Scientific Cyberattack Limited to Unauthorized Access on Certain On-Premises Systems

As per Boston Scientific’s Aug. 30 update, “the unauthorized activity is limited to certain on-premises systems,” providing the clearest indication yet of the scope of the cybersecurity incident that has disrupted the medical device maker’s global network and business operations. Boston Scientific said the investigation into the disruption remains ongoing, with third-party cybersecurity experts. Based on its investigation to date, the company said it has found no indication of unauthorized activity in its environment related to the incident since Aug. 25. The company also clarified that its cl

Related Companies
M
microsoft logo
microsoft
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

PaperCut Issues Second Emergency Patch as Researchers Break Fix for Exploited Zero-Days

PaperCut released a second emergency patch last Friday, for two vulnerabilities in its NG and MF print management servers that attackers are already exploiting, after security researchers demonstrated that the vendor's first fix could be bypassed. The two flaws work as a chain. CVE-2026-81578, rated 8.8 on the CVSS scale, is an improper access control weakness in the PaperCut web management interface that lets unauthenticated remote requests reach administrative functions before the server finishes validating access. CVE-2026-82078, rated 9.4, is an unsafe dynamic class-loading flaw in the pro

Related Companies
P
PaperCut logo
PaperCut
A
ash-project logo
ash-project
G
gnu logo
gnu
İlgili CVE'ler
CVE-2026-81578 CVE-2026-82078 CVE-2026-77846
Read at the source
The Cyber Express1 mo ago

Anthropic Warns Commodity Infostealers Are Hijacking Claude Sessions to Drain Paid Usage

Anthropic warned users over the weekend that a threat actor is using widely available infostealer malware to hijack active Claude login sessions from infected computers, then using those sessions to run up victims' paid usage without ever needing a password or a two-factor code. The company said it identified six malware families in the campaign: Vidar, LummaC2, StealC, RedLine and Acreed on Windows, and Atomic Stealer, known as AMOS, on a smaller number of macOS machines. None are novel or bespoke. All are commodity stealers sold or rented on criminal dark web marketplaces, and all work the s

Related Companies
A
anthropic logo
anthropic
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

AshSqlite Vulnerability (CVE-2026-77846) Exposes Hidden JSON Fields

CVE-2026-77846, a newly disclosed AshSqlite vulnerability, can allow attackers to access hidden or sensitive fields stored inside JSON and map columns when applications pass untrusted input to AshSqlite's get_path/2 functionality. The Erlang Ecosystem Foundation's CNA issued the vulnerability entry on August 30, 2026. The issue affects AshSqlite, the SQLite data layer used by the Ash Framework. Although it involves database queries, CVE-2026-77846 is not SQL injection. Instead, the AshSqlite vulnerability results from unsafe construction of JSON paths and the way SQLite interprets special char

Related Companies
A
ash-project logo
ash-project
R
rubygems logo
rubygems
R
ruby-lang logo
ruby-lang
N
n/a logo
n/a
J
joyent logo
joyent
R
ruby logo
ruby
İlgili CVE'ler
CVE-2026-77846
Read at the source
The Cyber Express1 mo ago

The Cyber Express Weekly Roundup: Exploited Entra ID Flaw, AI Agent Risks, and Global Cybercrime Crackdown

This weekly roundup highlights a broad range of cybersecurity and technology developments affecting cloud identity infrastructure, social media platforms, businesses, digital assets, and international law enforcement. From a critical Microsoft Entra ID vulnerability exploited before remediation to a global crackdown on West African cybercrime networks, recent developments demonstrate how attackers continue to target both technical systems and human trust. The latest developments also show that cybersecurity risks are expanding alongside the rapid adoption of cloud services and artificial intel

Related Companies
M
microsoft logo
microsoft
K
kerberos-io logo
kerberos-io
SY
shigio yamaguchi logo
shigio yamaguchi
UI
Ubiquiti Inc logo
Ubiquiti Inc
W
watchguard logo
watchguard
İlgili CVE'ler
CVE-2026-69836
Read at the source
The Cyber Express1 mo ago

Can We Trust AI Agents With Security Decisions? Adarsh Kant Sinha Explains

As organizations race to move from AI chatbots and copilots toward autonomous AI agents, security leaders are being forced to answer a harder question than "should we adopt AI?" — it's "can we trust AI to make security decisions?" To unpack this, The Cyber Express sat down with Adarsh Kant Sinha, Founder and CEO of ANVE.AI. With expertise spanning AI architecture, Agentic AI, AI automation, and secure AI infrastructure, Adarsh brings a practitioner's and builder's perspective to the rapidly evolving AI landscape. He has built a community of more than 25,000 ethical hackers, mentored startups,

Related Companies
G
gentoo logo
gentoo
S
Soft-Machine-io logo
Soft-Machine-io
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Cyber Express1 mo ago

Boston Scientific Cyberattack Disrupts Order Processing, Shipping Worldwide

Boston Scientific said a cyberattack detected this Tuesday, caused a network outage and cut off its ability to process and ship customer orders globally, and the medical device maker has not been able to say when full service will return. The company disclosed the incident in an 8-K filed with the Securities and Exchange Commission on Wednesday and in a statement on its official website. It said the intrusion affected certain information technology systems and limited access to business applications underpinning day-to-day operations. Boston Scientific is among the world's largest medical devi

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

31-40 / 70 news items shown