Security news.
Active exploitation of edge infrastructure and authentication controls dominates today's security landscape, led by widespread targeting of OpenSSH and SonicWall firewalls. Massive breaches and high-value heists continue to escalate, alongside emerging risks from developer AI tools that leak embedded secrets into public repositories. Teams should prioritize patching exposed edge services and auditing source control for accidentally saved credentials.
OpenSSH 'SSHole' Vulnerability Under Rapid Active Exploitation
Attackers are aggressively scanning honeypots and compromising Linux systems via CVE-2026-123158, an OpenSSH flaw affecting musl-based setups without PAM that permits root logins to passwordless accounts.
SonicWall Patches SonicOS SSL-VPN Flaw Exploited in the Wild
SonicWall and CISA warned of active exploitation targeting CVE-2026-19868, a critical authentication bypass that allows attackers with partial credentials to bypass SAML and MFA checks on SonicOS appliances.
French Bank Hit by $133 Million Cyber Heist via Service Provider
Cooperative banking giant Crédit Mutuel Arkéa suspended multiple internal systems after unauthorized transactions totaling up to $133 million were routed through a compromised third-party vendor.
Japanese Giant Iris Ohyama Discloses Cloud Breach of 7.7 Million Records
Consumer manufacturer Iris Ohyama revealed that unauthorized access to a third-party cloud service exposed the personal details of roughly 7.7 million Iris Plaza retail platform customers.
Claude Code Feature Leaks Secrets Across 1,100+ GitHub Repositories
A workflow default saving developer commands in Anthropic's AI tool exposed live API keys and passwords in plaintext across 1,122 public repositories when users selected the "Don't Ask Again" prompt.
Storm-3358 Deploys Autonomous ARTEX AI Framework Against Banks
Microsoft observed financially motivated actors weaponizing ARTEX, an open-source agentic pentesting platform, to autonomously hunt exposed cloud secrets and compromise financial sector targets.
Chainalysis Breach Compromises User Credentials and Forces Service Outages
A security intrusion involving agentic attack techniques resulted in the exposure of user hashes and active session tokens across the entire customer base, prompting the shutdown of Reactor and Data Solutions tools.
Barracuda Fixes Pre-Auth Root RCE Chain in Email Gateways
Researchers released exploit details for a zero-click appliance takeover chaining an authorization bypass (CVE-2026-116606) with command injection on Barracuda Email Security Gateways.