Latest security news

Tue, 8 Sept 2026

1. 17:25
   ClickFix Campaigns Abuse Legitimate Services for Persistent Access

   Two separate attacks demonstrate how threat actors are finding new ways to compromise organizations by using the popular social engineering tactic.

   Dark Reading
2. 16:35
   ShinyHunters hackers claim breach of Florida "DAVID" DMV database

   The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known as "DAVID" and stole over 200,000 records about drivers in the state.

   BleepingComputer
3. 16:28
   OpenAI says ChatGPT outage causes image generation errors

   OpenAI is investigating an ongoing incident causing ChatGPT image generation failures and delays when uploading files.

   BleepingComputer
4. 16:20
   Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

   A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider. "The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment

   The Hacker News
5. 15:45
   Boston Scientific left nursing its bottom line after cyberattack

   Medical device giant warns August intrusion will hit Q3 and full-year sales and earnings as recovery drags on

   The Register
6. 15:44
   N-able issues patch for zero-day flaw

   Security researchers warned the company of unusual threat activity in a recently patched N-able environment.

   Cybersecurity Dive
7. 15:33
   The US military just turned off ad tracking on its phones. Maybe you should too

   Location data sold by the ad industry has reportedly helped adversaries target US troops. The Pentagon has responded by switching off ad tracking on its devices - and you can do the same on yours. Read more in my article on the Hot for Security blog.

   Graham Cluley
8. 15:22
   August updates trigger 0xc0000409 errors on Windows Server 2016

   Microsoft says the August 2026 security update may trigger 0xc0000409 errors on Windows Server 2016 systems where the Compatibility Appraiser diagnostic service is enabled.

   BleepingComputer·Microsoft, Windows
9. 15:19
   OpenVPN security advisory (AV26-889)

   Serial Number: AV26-889 Date: September 8, 2026 As of September 7, 2026, OpenVPN is affected by vulnerabilities in the following product: OpenVPN Prior to or equal to 2.6.22 Prior to or equal to 2.7.6 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-84732 - Reliability layer unbounded TLS timeout and acks for non-outstanding packets Security Advisories & Updates | OpenVPN

   Canadian Centre for Cyber Security
10. 15:00
    How to secure hybrid meeting rooms without sacrificing user experience

    SPONSORED FEATURE: With regulators tightening rules and attack surfaces widening, meeting-room kit must bake in security without pushing users toward workarounds

    The Register