Hospital operator Nutex Health says data stolen in cyberattack
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]
SOC manager brief
High-signal items — worth prioritizing for SOC triage and manager awareness.
Ranked using headline + RSS summary text (CVEs, incidents, vulns, ransomware, phishing, and related terms). Not a replacement for analyst judgment.
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. [...]
First Malware Built Specifically for Car Head Units Fuels Botnet
Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices. The post First Malware Built Specifically for Car Head Units Fuels Botnet appeared first on SecurityWeek .
Is Cyber Facing an Affordability Crisis?
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself.
Hackers target WordPress sites in miniOrange auth bypass attacks
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]
Patching brief
CVEs, advisories, and patch-focused items from your current feed view — use for patch planning and change windows.
Heuristic filter on headline + RSS summary (CVE patterns, vuln/patch language). Verify severity and applicability in your environment.
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
CVE-2026-61979 and CVE-2026-15981 are authentication bypass vulnerabilities affecting the MiniOrange SAML 2.0 SSO plugin. The post WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities appeared first on SecurityWeek .
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset.
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. The post CISA Warns of Exploited Oracle WebLogic Vulnerability appeared first on SecurityWeek .
Critical Vulnerability in GitLab CE/EE (CVE-2026-19478)
No feed summary available — open the article for context.
Critical Vulnerability exists in Wordpress Plugin: Pods – Custom Content Types and Fields (CVE-2026-19598)
Custom Content Types and Fields (CVE-2026-19598)
Critical Linux Kernel Network Bridge Vulnerability (CVE-2026-74480)
No feed summary available — open the article for context.
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
CISA has issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.
Hackers breached over 270 Zimbra servers in ongoing attacks
Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. [...]
Feed snapshot
Time window
Last 24 hours
Since Mon Aug 24 · 17:21 · UTC
Stories in this view
37
Feeds configured
8
7 source(s) represented below
Time span (local)
17:38 – 16:23
By source
- The Hacker News14
- BleepingComputer12
- SecurityWeek10
- The Register: Security5
- NCSC Ireland4
- Dark Reading3
- Schneier on Security2
Last 24h stories
- Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation
- You could've applied all 1,449 Oracle patches and still been hit by this attack
- E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
- Is Cyber Facing an Affordability Crisis?
- Hospital operator Nutex Health says data stolen in cyberattack
- Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails
- A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
- From Fake Workers to Account Recovery: The Growing Identity Verification Risk
- Microsoft PowerToys adds Alt+Tab-style switching for an app's windows
- Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
- WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
- Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference
- Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
- Hackers breached over 270 Zimbra servers in ongoing attacks
- Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
- 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
- First Malware Built Specifically for Car Head Units Fuels Botnet
- Frontier AI: Vulnerability Management's Systemic Revolution
- Police arrests dozens of suspects in global cybercrime crackdown
- CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw
- Silent Patches Don’t Stop Attackers – They Blind Defenders
- Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff
- Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
- Critical Linux Kernel Network Bridge Vulnerability (CVE-2026-74480)
- Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
- Critical Vulnerability in GitLab CE/EE (CVE-2026-19478)
- Critical Vulnerability exists in Wordpress Plugin: Pods – Custom Content Types and Fields (CVE-2026-19598)
- Exploited Zimbra Flaw Highlights Shrinking Window to Patch
- Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
- Unpatched Calix flaw lets hackers bypass NAT to expose internal devices
- Browser fingerprint tool shows how easy you are to track using the latest sneaky tricks
- WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
- Hackers target WordPress sites in miniOrange auth bypass attacks
- TikTok reaches $400M settlement with US over COPPA violations
- Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
- Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
- ReliaQuest confirms failed data-theft attack after ShinyHunters breach