Latest security news

Today · Wed, 16 Sept 2026

1. 11:14
   Critical ScreenConnect flaw now actively exploited in attacks

   Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

   BleepingComputer
2. 11:00
   Cyber-Attacks Cost Organizations $52,000 on Average

   Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000

   Infosecurity Magazine
3. 10:42
   Ministry of Justice apologizes after court staff accessed Southport victims' files

   Sensitive personal data was involved, but there is no evidence it was shared with third parties

   The Register
4. 10:00
   Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

   OPSWAT researchers find two zero-days in TP-Link cameras

   Infosecurity Magazine
5. 09:10
   Windows Server 2022 reaches end of mainstream support next month

   Microsoft has reminded customers that Windows Server 2022 will reach the end of mainstream support next month and enter extended support until October 2031.

   BleepingComputer·Microsoft, Windows
6. 09:00
   Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program

   A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program

   Infosecurity Magazine·Palo Alto, Sophos
7. 08:25
   NCSC and Allies Warn of Iranian Spyware Campaign

   The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents

   Infosecurity Magazine
8. 07:00
   Google fixes actively exploited Android zero-day on Pixel devices

   Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.

   BleepingComputer·Google, Android
9. 05:54
   Mythos has made 2026 patching hell. It might make 2027 a breeze

   Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner

   The Register
10. 05:48
    Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

    Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. "This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution," Wordfence said. The WordPress security company said it has blocked over

    The Hacker News·WordPress