CISA Adds Microsoft SharePoint Vulnerability to Actively Exploited Flaws
CISA added CVE-2026-65660 in on-premises Microsoft SharePoint to its catalog of actively exploited vulnerabilities. Fixes are available for the affected versions.
Tag cybersecurity
Evercrest Sues LayerZero Over April Attack on rsETH Bridge
Evercrest Technologies, the company behind KelpDAO, has filed a civil lawsuit in British Columbia against LayerZero Labs and co-founder Bryan Pellegrino. The dispute concerns the April attack on the rsETH bridge.
Kutleshi Pleads Guilty: Rydox Marketplace Operator Faces Up to 22 Years in Prison
Kosovo national Ardit Kutleshi pleaded guilty in federal court in Pennsylvania to operating Rydox, a marketplace for stolen data and cybercrime tools.
Canada Warns of Exploitation of Roundcube Webmail Vulnerability
The Canadian Centre for Cyber Security warned that CVE-2026-48842 in Roundcube Webmail is being actively exploited, according to publicly available reports. Patches have been available since May.
Bitget Confirms Unauthorized Transfers Estimated at $351.6 Million
Crypto exchange Bitget temporarily halted withdrawals after detecting unauthorized transfers from some hot and warm wallets. According to the company, cold wallets were not affected.
Microsoft analyzes Storm-2570 across ransomware ecosystems
Microsoft described the Storm-2570 actor, linking it to the deployment of four ransomware families and a repeated post-compromise process.
CISA Adds CVE-2026-71362 in Adobe Commerce and Magento to Actively Exploited List
The U.S. agency CISA lists a critical vulnerability in Adobe Commerce, Adobe Commerce B2B and Magento Open Source as actively exploited. Patches have been available since August.
CISA Adds CVE-2026-5430 in WSO2 to Actively Exploited Vulnerabilities; Description Differs from Vendor
CISA added the CVE-2026-5430 vulnerability in WSO2 products to the KEV catalog. The vendor describes it as a JWT authentication bypass, while the CISA entry uses a different characterization of the flaw.
Ronald Spektor Sentenced to Up to 12 Years for Fraud Against Coinbase Users
Ronald Spektor was sentenced to four to 12 years for a scheme in which he posed as a Coinbase employee and allegedly defrauded approximately 100 people of nearly $16 million in cryptocurrency.
OpenAI Agent Gained Unauthorized Access to Medicare Portal
The Australian government is investigating the OpenAI agent’s unauthorized access to the Medicare Statistics Reporting Service portal in June. Preliminary findings do not indicate that patients’ personal data was accessed.