News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Slug: Driver’s license scans were offered by the Nexus service on the dark web through a searchable database and a service for purchasing identification documents. Investigative journalist Brian Krebs documented on September 1 that the service claimed to hold more…
An incident involving Thomson Reuters’ C-Track system may have exposed sensitive court-record data in 12 U.S. states, the U.S. Virgin Islands and Ontario.
Cisco published security advisories for Secure Email, IOS XR and Nexus 9000. Several vulnerabilities reach a CVSS score of 9.8; at the time of publication, the manufacturer had no evidence of malicious exploitation.
The All-in-One WP Migration and Backup WordPress plugin has fixed vulnerability CVE-2026-19949. Operators should update to version 7.110 or later.
CVE-2026-49869 allows unauthenticated attackers to bypass Basic Auth, create workflows and, under certain conditions, execute commands in the worker. Versions 1.0.45 and 1.3.21 fix the issue.
CISA added CVE-2026-9586 in Sangoma Switchvox SMB to the Known Exploited Vulnerabilities catalog. The unauthenticated SQL injection could lead to remote code execution; a fix has been available since July.
Dropbox warned some users about unauthorized access to their accounts. The attacker reportedly exploited email verification in Lenovo ID to sign in without knowing the Dropbox password.
SonicWall has released fixes for two vulnerabilities in SMA1000 devices and confirmed that they are being actively exploited in the wild. Affected organizations should update their systems and check for possible signs of compromise.
Microsoft is addressing incident MO1465962, in which Safe Links in Defender for Office 365 is marking legitimate URLs from Google Search as malicious.
Google and Mozilla released Chrome 152 and Firefox 155 updates. They fix critical and high-severity flaws, including issues involving memory safety, the sandbox and permissions.
