Latest security news

Wed, 2 Sept 2026

1. 14:00
   Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons

   Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud

   Infosecurity Magazine
2. 13:44
   Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

   A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational institutions, and using them to divert visitors to attacker-controlled pages promoting online gambling and sports betting. Check Point Research said it has tracked the campaign since mid-2025. The modules

   The Hacker News·Apache
3. 13:38
   HPE security advisory (AV26-873)

   Serial number: AV26-873 Date: September 2, 2026 As of September 1, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE Networking AOS-CX Prior to or equal to 10.10.1180 Prior to or equal to 10.13.1180 Prior to or equal to 10.16.1051 Prior to or equal to 10.17.1021 Prior to or equal to 10.18.0001 HPE Networking Fabric Composer Prior to or equal to 7.3.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HPESBNW05133 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Fabric Composer HPESBNW05134 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking ArubaOS-CX (AOS-CX) HPE Security Bulletin Library

   Canadian Centre for Cyber Security
4. 13:12
   BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

   Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran from approximately August 28 at 20:57

   The Hacker News
5. 12:45
   Scammers are getting smarter about where they target you

   New Malwarebytes research reveals how different scams are tailored to different platforms.

   Malwarebytes Labs
6. 12:28
   [Control systems] Schneider Electric security advisory (AV26-871)

   Serial Number: AV26-871 Date: September 2, 2026 As of September 1, 2026, Schneider Electric is affected by vulnerabilities in the following products: NetBotz 5 - 750/755 Versions prior to or equal to 5.5.2 PowerChute Serial Shutdown Versions prior to or equal to 1.5 The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates. Multiple Vulnerabilities on NetBotz 5 - 750/755 Products Improper Restriction of Excessive Authentication Attempts vulnerability on PowerChute™ Serial Shutdown Schneider Electric Security Notifications

   Canadian Centre for Cyber Security
7. 11:48
   I’ve been deepfaked: What do I do?

   Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal

   WeLiveSecurity
8. 11:15
   Two critical Chrome flaws put users at risk on malicious websites

   Update Chrome now: Two critical vulnerabilities could allow a malicious website to run code on your device.

   Malwarebytes Labs·Chrome
9. 10:45
   Nutex Health Says Patient Data Stolen, Hackers Threaten Leak

   The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party

   Infosecurity Magazine
10. 10:16
    Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon

    Research by: Amit Yardeni Key Points Introduction Since mid-2025, Check Point Research has tracked a sustained campaign against Brazilian organizations. The tradecraft points to a Chinese-speaking cybercrime group connected to Earth Berberoka, an actor first documented targeting gambling sites across Asia. Once inside a victim, the group deploys a broad Linux toolkit: a custom downloader, several backdoors,

    Check Point Research·Linux