WSO2 CVE-2026-5430 Exploitation Attempts Use Forged Administrator JWTs
Security firm watchTowr’s honeypots detected attempts to exploit a critical JWT authentication flaw in WSO2 products. The vendor has already released fixes.
Tag cybersecurity
Acronis Fixes Flaw in cPanel and Plesk Plugins, Reports Limited Exploitation
CVE-2026-87886 enables local privilege escalation in Acronis Backup Linux plugins for cPanel & WHM and Plesk. Fixed versions are available.
Apple Releases iOS 27 and macOS Golden Gate 27 With Extensive Security Fixes
Apple released iOS 27 and macOS Golden Gate 27 on September 14, 2026. The updates fix flaws with potential impacts ranging from data leaks to remote code execution.
Possible GSS Data Leak After VPN Vulnerability Exploited in Japan
Japan’s Digital Agency is investigating the possible leak of approximately 246,000 records from the government’s GSS service after a VPN device vulnerability was exploited.
Compromised HBO Max ad account spread ClickFix malware on Reddit
Attackers abused an HBO Max account authorized to publish ads on Reddit. The malicious campaigns prompted users to run a malware-laden command themselves on Windows or macOS.
Cisco Fixes Critical Secure Email Gateway Flaw, CISA Adds It to KEV Catalog
CVE-2026-76461 in Cisco Secure Email Gateway allows remote command execution with root privileges after a specially crafted email is sent. Cisco released fixes, and CISA added it to the KEV catalog.
Pentagon AI Transition: About 90% of Workloads Moved Away from Anthropic
U.S. Deputy Secretary of Defense Emil Michael said that approximately 90% of classified AI workloads using Anthropic have already been moved to other providers. The remainder is expected to be completed by the end of September 2026.
Three JFrog Artifactory Flaws Actively Exploited to Gain Administrator Access
Security researchers have recorded attacks against self-hosted JFrog Artifactory servers in which attackers exploited three patched vulnerabilities to gain administrative privileges and establish persistence.
CVE-2026-51990 in Sogou Input Method Used to Deploy GRAYRABBIT Backdoor
Gen Digital researchers described the real-world exploitation of a vulnerability in Sogou Input Method for Windows. Clicking a malicious link allowed code to run in the user’s context.
Wiz Reports Active Exploitation of Vulnerabilities in Self-Hosted JFrog Artifactory
Wiz researchers observed attacks chaining two vulnerabilities in self-hosted JFrog Artifactory to gain administrative access.