Coder Registry Distributed Malicious Terraform Modules After Infrastructure Compromise
The compromise of Coder Registry infrastructure on August 31, 2026, led to the delivery of Terraform modules containing credential-targeting malicious code.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Microsoft Describes Phishing Using Invisible Unicode Characters
Microsoft analyzed a phishing campaign that inserted invisible Unicode Tags characters into financial terms to make email filters’ work more difficult.
Resolved: Discord – Some Servers Are Unavailable
Discord: Some servers are unavailable. The incident has been resolved.
Nexus Claimed to Offer Scans of More Than 153 Million Driver’s Licenses
Slug: Driver’s license scans were offered by the Nexus service on the dark web through a searchable database and a service for purchasing identification documents. Investigative journalist Brian Krebs documented on September 1 that the service claimed to hold more…
C-Track Data Breach Affected Court Records in the U.S. and Ontario
An incident involving Thomson Reuters’ C-Track system may have exposed sensitive court-record data in 12 U.S. states, the U.S. Virgin Islands and Ontario.
Cisco Releases Critical Fixes for Secure Email, IOS XR, and Nexus 9000
Cisco published security advisories for Secure Email, IOS XR, and Nexus 9000. Several vulnerabilities have a CVSS score of 9.8; at the time of publication, the vendor had no evidence of malicious exploitation.
All-in-One WP Migration and Backup WordPress Plugin Fixes Flaw That Could Enable Site Takeover
The All-in-One WP Migration and Backup WordPress plugin has fixed the CVE-2026-19949 vulnerability. Operators should update to version 7.110 or later.
CISA Adds Kestra OSS Vulnerability to Actively Exploited Vulnerabilities List
The CVE-2026-49869 flaw allows attackers to bypass Basic Auth without logging in, create workflows and, under certain conditions, execute commands in the worker. Versions 1.0.45 and 1.3.21 contain fixes.
CISA Adds Switchvox Vulnerability to KEV Catalog
CISA added CVE-2026-9586 in Sangoma Switchvox SMB to the Known Exploited Vulnerabilities catalog. The unauthenticated SQL injection could lead to remote code execution; a fix has been available since July.
Resolved: Discord – Problems Selecting Voice Endpoints
Discord: Problems selecting voice endpoints. The incident has been resolved.