Security news.
Today's cybersecurity landscape highlights critical vulnerabilities, active exploitation by ransomware groups, and a continued focus on AI's role in both attacks and defense. Significant patches from major vendors like Apple and Cisco are also making headlines, underscoring the relentless pace of threat and remediation.
CISA Warns: VMware RCE Flaw Now Exploited by Ransomware Gangs
CISA has alerted security teams that ransomware groups are now actively exploiting a critical VMware vCenter vulnerability that was patched in July.
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Cisco has issued a warning about CVE-2026-76461, a critical remote code execution flaw in its Secure Email Gateway, which is being actively exploited by attackers to gain root privileges.
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain
A Chinese threat actor is using recently patched zero-day vulnerabilities in Google Chrome and Microsoft Windows through spear-phishing campaigns to deploy the GRIMWEDGE JavaScript backdoor.
Japan’s Digital Agency Suffers Data Breach Affecting 240,000
A vulnerability in a VPN product was exploited, leading to the theft of personal information for approximately 240,000 individuals from Japan's Digital Agency.
Apple Patches 200 Vulnerabilities in Major OS Updates
Apple has released new iOS 27 and macOS Golden Gate 27 updates, addressing over 200 vulnerabilities, including kernel flaws that could lead to memory corruption, privilege escalation, and information leaks.
Mass-Scanning Campaign Exploits Vite Flaw to Steal Cloud Credentials
Researchers have uncovered a mass-scanning campaign targeting internet-exposed Vite development servers to steal cloud credentials and configurations from AWS and Microsoft Azure instances.
LiteSpeed Enterprise Flaw Allows Root Access on Shared Servers
A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege website user to gain root access on a shared-hosting server, posing a significant risk to multi-tenant environments.
OpenAI Investigates Report Linking AI Agents to RubyGems Attack
OpenAI is investigating claims that AI agents may have been involved in malicious activity against RubyGems in May, which led to a suspension of new account registrations.