ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach New Windows Defender zero-day blocks Microsoft antivirus updates EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts Check Point warns of Management Server zero-day exploited in attacks ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach New Windows Defender zero-day blocks Microsoft antivirus updates EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts Check Point warns of Management Server zero-day exploited in attacks Security F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution attacks. Sergiu Gatlan September 23, 2026 03:17 AM 0 F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution attacks. September 23, 2026 Security Rogue external MFA providers can steal passwords during logins Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. Lawrence Abrams September 22, 2026 05:45 PM 0 Rogue external MFA providers can steal passwords during logins Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. Lawrence Abrams September 22, 2026 Agentic AI is spreading fast. Here's how to find and secure it. Your workforce is saving time by connecting AI agents to email, file shares, and business workflows, with or without security's sign-off. This guide breaks down the risks and gives you four practical steps to build visibility, enforce least privilege, and extend the controls you already have. Nudge Security Sponsorship Agentic AI is spreading fast. Here's how to find and secure it. Your workforce is saving time by connecting AI agents to email, file shares, and business workflows, with or without security's sign-off. This guide breaks down the risks and gives you four practical steps to build visibility, enforce least privilege, and extend the controls you already have. Nudge Security Sponsorship Security , Government , Legal Sweden fines Miljödata $183,000 over breach affecting 2.2 million Sweden's data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people. Bill Toulas September 22, 2026 05:40 PM 0 Sweden fines Miljödata $183,000 over breach affecting 2.2 million Sweden's data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people. September 22, 2026 Security , Government Chinese hackers exploit WordPress, Zyxel flaws to steal govt data A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases. Bill Toulas September 22, 2026 04:35 PM 0 Chinese hackers exploit WordPress, Zyxel flaws to steal govt data A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases. September 22, 2026 Security ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive data on employees and job applicants. Lawrence Abrams September 22, 2026 03:13 PM 1 ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive data on employees and job applicants. Lawrence Abrams September 22, 2026 Security , Artificial Intelligence New ClosedQuorum Windows malware uses AI for attack decisions A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. Bill Toulas September 22, 2026 02:04 PM 0 New ClosedQuorum Windows malware uses AI for attack decisions A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. September 22, 2026 Deals QuickBooks Pro Plus 2024 is on sale for just $299.99 Keeping business finances organized gets complicated fast when invoices, expenses, inventory, and reports are scattered across different places. A one-year activation of Intuit QuickBooks Desktop Pro Plus 2024 for Windows is $299.99 for a limited time, down from its $536 MSRP. BleepingComputer Deals September 22, 2026 02:04 PM 0 QuickBooks Pro Plus 2024 is on sale for just $299.99 Keeping business finances organized gets complicated fast when invoices, expenses, inventory, and reports are scattered across different places. A one-year activation of Intuit QuickBooks Desktop Pro Plus 2024 for Windows is $299.99 for a limited time, down from its $536 MSRP. BleepingComputer Deals September 22, 2026 Security Reducing shadow IT visibility gaps with Wazuh Shadow IT can leave security teams unaware of unmanaged endpoints, unauthorized software, and other assets that fall outside existing monitoring. Wazuh explains how endpoint inventory, agentless monitoring, and centralized analysis can help organizations identify and reduce these visibility gaps. Wazuh September 22, 2026 01:17 PM 0 Reducing shadow IT visibility gaps with Wazuh Shadow IT can leave security teams unaware of unmanaged endpoints, unauthorized software, and other assets that fall outside existing monitoring. Wazuh explains how endpoint inventory, agentless monitoring, and centralized analysis can help organizations identify and reduce these visibility gaps. September 22, 2026 Security Check Point warns of Management Server zero-day exploited in attacks Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. Sergiu Gatlan September 22, 2026 12:32 PM 0 Check Point warns of Management Server zero-day exploited in attacks Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. September 22, 2026 Security EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). Bill Toulas September 22, 2026 11:00 AM 1 EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). September 22, 2026 Security Webinar tomorrow: Inside real-world Google Workspace breaches Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications, from initial access through the critical first hours of incident response. Learn which security controls and response decisions can make the greatest difference. BleepingComputer September 22, 2026 08:57 AM 0

Webinar tomorrow: Inside real-world Google Workspace breaches Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications, from initial access through the critical first hours of incident response. Learn which security controls and response decisions can make the greatest difference. BleepingComputer September 22, 2026 Security D-Link warns of max severity zero-day bug in DIR-822A routers D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. Sergiu Gatlan September 22, 2026 08:48 AM 0 D-Link warns of max severity zero-day bug in DIR-822A routers D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. September 22, 2026 Deals Get 5 years of AdGuard VPN + Ad Blocker for life for only $50 A VPN and an ad blocker handle different parts of your online experience, so having both makes sense. The AdGuard VPN + Ad Blocker Family Security Suite is currently on sale for just $49.99 (MSRP $439.39) for a limited time. It combines five years of VPN access with a lifetime AdGuard Family Plan subscription. BleepingComputer Deals September 22, 2026 07:12 AM 0 Get 5 years of AdGuard VPN + Ad Blocker for life for only $50 A VPN and an ad blocker handle different parts of your online experience, so having both makes sense. The AdGuard VPN + Ad Blocker Family Security Suite is currently on sale for just $49.99 (MSRP $439.39) for a limited time. It combines five years of VPN access with a lifetime AdGuard Family Plan subscription. BleepingComputer Deals September 22, 2026 Security , Microsoft New Windows Defender zero-day blocks Microsoft antivirus updates Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero-day exploit that blocks antivirus updates. Sergiu Gatlan September 22, 2026 05:55 AM 2 New Windows Defender zero-day blocks Microsoft antivirus updates Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Defender zero-day exploit that blocks antivirus updates. September 22, 2026 Security CISA orders feds to patch Zyxel flaw exploited for data theft ​Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Sergiu Gatlan September 22, 2026 04:53 AM 0 CISA orders feds to patch Zyxel flaw exploited for data theft ​Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). September 22, 2026 Security BigCommerce alerts merchants of data breach linked to Ribon apps Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. Bill Toulas September 21, 2026 05:18 PM 0 BigCommerce alerts merchants of data breach linked to Ribon apps Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. September 21, 2026 Security , Linux CISA alerts of active exploitation of three Linux kernel flaws The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. Bill Toulas September 21, 2026 04:12 PM 0 CISA alerts of active exploitation of three Linux kernel flaws The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. September 21, 2026 Security WordPress Click2Shell flaw lets hackers execute PHP on the server Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. Bill Toulas September 21, 2026 02:23 PM 0 WordPress Click2Shell flaw lets hackers execute PHP on the server Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. September 21, 2026 Microsoft Microsoft to retire Microsoft 365 Companion apps in December Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. Sergiu Gatlan September 21, 2026 01:54 PM 1 Microsoft to retire Microsoft 365 Companion apps in December Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. September 21, 2026 Security , Google , Legal Google fined €403 million over location data privacy violations Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data. Bill Toulas September 21, 2026 11:41 AM 2 Google fined €403 million over location data privacy violations Ireland's Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data. September 21, 2026 Researchers escape OpenAI Codex sandbox to run commands on host Researchers escape OpenAI Codex sandbox to run commands on host Malicious npm packages evade install-script defenses at runtime Malicious npm packages evade install-script defenses at runtime Microsoft reminds admins to migrate Entra ID users to passkeys Microsoft reminds admins to migrate Entra ID users to passkeys Automate Onboarding and Access Reviews with No-Code IGA: See how it works Automate Onboarding and Access Reviews with No-Code IGA: See how it works Overdue a password health-check? Audit your Active Directory for free Overdue a password health-check? Audit your Active Directory for free Find out how long recovery really takes — and what it costs. Read the 2025 BCDR Report. Find out how long recovery really takes — and what it costs. Read the 2025 BCDR Report. Overdue a password health-check? Audit your Active Directory for free Overdue a password health-check? Audit your Active Directory for free Build cyber resilience with Wazuh: The open-source SIEM & XDR for proactive protection Build cyber resilience with Wazuh: The open-source SIEM & XDR for proactive protection