Latest security news

Yesterday · Tue, 15 Sept 2026

1. 12:16
   CISA: Critical VMware RCE flaw now exploited by ransomware gangs

   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July.

   BleepingComputer·VMware
2. 11:52
   Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

   With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable Marimo notebook to an SSH

   The Hacker News
3. 11:45
   240,000 Hit by Data Breach at Japan’s Digital Agency

   Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people.

   SecurityWeek
4. 11:12
   Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

   Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The

   The Hacker News·Microsoft, AWS, F5
5. 11:06
   Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases

   The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks.

   SecurityWeek·Apple, iOS
6. 08:40
   Microsoft confirms KB5002914 Excel update breaks copy and paste

   Microsoft has confirmed that copy and paste may silently fail for some Excel users after installing the September 2026 KB5002914 security update.

   BleepingComputer·Microsoft
7. 08:40
   Microsoft Releases Emergency Patch to Fix RDS Snafu

   Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday

   Infosecurity Magazine·Microsoft
8. 07:31
   Cisco patches Secure Email Gateway zero-day exploited in attacks

   Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks.

   BleepingComputer·Cisco
9. 06:52
   LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

   A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. On such servers, many customers' sites run on a single machine, and an attacker with one of those hosting accounts could exploit the flaw to access or alter other sites and the server itself,

   The Hacker News
10. 06:11
    Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

    Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker

    CriticalUsed in attacksThe Hacker News·Cisco