The latest cybersecurity news, tech updates, and industry insightshttps://www.anthonybahn.com/en-ushttps://www.anthonybahn.com/news/collabora-cve-2026-110447-nextcloud-web-shells-exploited/https://www.anthonybahn.com/news/collabora-cve-2026-110447-nextcloud-web-shells-exploited/Collabora CVE-2026-110447 let attackers drop web shells on Nextcloud from Sept 10. Upgrade to 26.4.303 or remove the app, then hunt for shells.Tue, 20 Oct 2026 13:05:31 GMTSecurityhttps://www.anthonybahn.com/news/rank-math-seo-pro-3-0-123-supply-chain-malware/https://www.anthonybahn.com/news/rank-math-seo-pro-3-0-123-supply-chain-malware/Rank Math PRO malware hit sites that pulled 3.0.123 on Oct 15-16, 2026. Version 3.0.124 is clean, but backdoors stay. Indicators and cleanup steps.Mon, 19 Oct 2026 13:08:24 GMTSecurityhttps://www.anthonybahn.com/news/fortios-cve-2025-61624-peerstitch-implant-exploited/https://www.anthonybahn.com/news/fortios-cve-2025-61624-peerstitch-implant-exploited/FortiOS CVE-2025-61624 is now in CISA KEV after Unit 42 tied it to PEERSTITCH, a memory-only implant hidden in FortiGate logging and VPN daemons.Sun, 18 Oct 2026 13:05:00 GMTSecurityhttps://www.anthonybahn.com/news/beyondtrust-remote-support-cve-2026-102764-exploited-armory-castle/https://www.anthonybahn.com/news/beyondtrust-remote-support-cve-2026-102764-exploited-armory-castle/BeyondTrust Remote Support flaw CVE-2026-102764 was exploited as a zero-day since August. Apply BT26-05-RS, hunt off-appliance logs, then rotate credentials.Sat, 17 Oct 2026 13:04:55 GMTSecurityhttps://www.anthonybahn.com/news/windows-shell-cve-2026-96951-mark-of-the-web-bypass-exploited/https://www.anthonybahn.com/news/windows-shell-cve-2026-96951-mark-of-the-web-bypass-exploited/Windows Shell CVE-2026-96951 lets crafted files skip Mark of the Web warnings. It is exploited, on CISA KEV, and fixed in October 2026 updates.Fri, 16 Oct 2026 13:05:42 GMTSecurityhttps://www.anthonybahn.com/news/palo-alto-pan-os-cve-2026-0322-management-interface-rce-exploited/https://www.anthonybahn.com/news/palo-alto-pan-os-cve-2026-0322-management-interface-rce-exploited/PAN-OS CVE-2026-0322 lets an authenticated admin run code as root on PA-Series, VM-Series and Panorama. It is exploited and on CISA KEV.Thu, 15 Oct 2026 13:06:58 GMTSecurityhttps://www.anthonybahn.com/news/ivanti-connect-secure-cve-2026-104935-zero-day-active-directory-credential-theft/https://www.anthonybahn.com/news/ivanti-connect-secure-cve-2026-104935-zero-day-active-directory-credential-theft/An unauthenticated Ivanti Connect Secure chain was exploited from 3 October. CISA's deadline is 16 October, and the attackers used the appliance's LDAP account to pull LAPS and BitLocker secrets.Thu, 15 Oct 2026 00:46:43 GMTSecurityhttps://www.anthonybahn.com/news/french-supermarkets-danfoss-refrigeration-controllers-hijacked-forced-defrost-cert-fr-alert/https://www.anthonybahn.com/news/french-supermarkets-danfoss-refrigeration-controllers-hijacked-forced-defrost-cert-fr-alert/Attackers forced internet-exposed Danfoss refrigeration controllers into a six-hour defrost across French supermarket chains. CERT-FR says disconnect, filter, and factory-reset.Tue, 13 Oct 2026 13:08:43 GMTSecurityhttps://www.anthonybahn.com/news/palo-alto-globalprotect-cve-2026-0257-settra-qilin-ransomware-forged-vpn-sessions-survive-patch/https://www.anthonybahn.com/news/palo-alto-globalprotect-cve-2026-0257-settra-qilin-ransomware-forged-vpn-sessions-survive-patch/Two ransomware operations now forge GlobalProtect VPN sessions through a May auth bypass. Sessions minted before the fix survive it, so terminate every session and hunt the window.Mon, 12 Oct 2026 13:11:11 GMTSecurityhttps://www.anthonybahn.com/news/ahsaycbs-cve-2026-105133-105134-exploited-backup-server-rce/https://www.anthonybahn.com/news/ahsaycbs-cve-2026-105133-105134-exploited-backup-server-rce/Attackers are chaining an auth bypass and command injection to run code as SYSTEM on internet-facing AhsayCBS backup servers, and the version listed as the fix is still vulnerable.Sun, 11 Oct 2026 13:14:32 GMTSecurityhttps://www.anthonybahn.com/news/ghostaction-returns-hijacked-maintainer-accounts-mine-git-history-cloud-ai-keys/https://www.anthonybahn.com/news/ghostaction-returns-hijacked-maintainer-accounts-mine-git-history-cloud-ai-keys/Attackers hijacked two popular open-source maintainer accounts and pushed a fake 'security audit' workflow to hundreds of repositories, scraping secrets from CI and from full git history.Sat, 10 Oct 2026 13:10:43 GMTSecurityhttps://www.anthonybahn.com/news/flax-typhoon-cisa-kev-five-old-cves-integrity-tech-fbi-seizure/https://www.anthonybahn.com/news/flax-typhoon-cisa-kev-five-old-cves-integrity-tech-fbi-seizure/CISA's 8 October KEV batch is five CVEs from 2015 to 2023, all tied to a China-linked scanning operation whose FishHub and MicroScan tools the FBI just seized.Fri, 09 Oct 2026 13:13:44 GMTSecurityhttps://www.anthonybahn.com/news/splunk-enterprise-cve-2026-76268-patroni-rest-api-unauthenticated-command-execution/https://www.anthonybahn.com/news/splunk-enterprise-cve-2026-76268-patroni-rest-api-unauthenticated-command-execution/Splunk Enterprise 10.2 and 10.4 search head clusters run a bundled Patroni database manager whose REST API accepted unauthenticated commands. Found internally, rated 9.8, fixed in 10.4.3 and 10.2.7.Thu, 08 Oct 2026 13:11:08 GMTSecurityhttps://www.anthonybahn.com/news/atlassian-cve-2026-21589-arbitrary-file-read-crowd-credentials-admin-exploited/https://www.anthonybahn.com/news/atlassian-cve-2026-21589-arbitrary-file-read-crowd-credentials-admin-exploited/A pre-auth file-read bug in a library shared across eight Atlassian Data Center products leaks Crowd credentials for admin takeover. Honeypots saw attacks two hours after the PoC dropped.Wed, 07 Oct 2026 13:12:34 GMTSecurityhttps://www.anthonybahn.com/news/dell-system-update-cve-2026-86360-path-traversal-root-rce-optional-patch/https://www.anthonybahn.com/news/dell-system-update-cve-2026-86360-path-traversal-root-rce-optional-patch/Dell's DSA-2026-324 discloses a CVSS 9.6 path traversal in Dell System Update that gives an unauthenticated attacker root on PowerEdge hosts. The fixed build shipped 28 July marked Optional.Tue, 06 Oct 2026 13:11:12 GMTSecurityhttps://www.anthonybahn.com/news/denmark-cpr-register-breach-8-8-million-records-vendor-lookup-access-enumeration/https://www.anthonybahn.com/news/denmark-cpr-register-breach-8-8-million-records-vendor-lookup-access-enumeration/Attackers misused a small Danish company's lawful CPR lookup access for about ten days in September, extracting names, addresses and ID numbers for 8.8 million people. No CVE, no exploit.Mon, 05 Oct 2026 13:11:48 GMTSecurityhttps://www.anthonybahn.com/news/citrix-netscaler-cve-2026-88779-saml-memory-overflow-nsaaad-crash-loop-exploited/https://www.anthonybahn.com/news/citrix-netscaler-cve-2026-88779-saml-memory-overflow-nsaaad-crash-loop-exploited/A memory overflow in NetScaler's SAML path crashes the authentication daemon on builds patched for last week's zero-days. Citrix shipped 14.1-73.41 and 13.1-64.28 and confirms targeted attacks.Sun, 04 Oct 2026 13:08:50 GMTSecurityhttps://www.anthonybahn.com/news/zammad-cve-2026-102489-102490-session-hijack-root-ai-agent-divd-breach-cisa-kev/https://www.anthonybahn.com/news/zammad-cve-2026-102489-102490-session-hijack-root-ai-agent-divd-breach-cisa-kev/An AI agent chained a session-fixation flaw and a local root escalation in Zammad to breach DIVD in seconds. Both CVEs are in CISA KEV with a 5 October deadline; the vendor disputes the disclosure.Sat, 03 Oct 2026 13:06:54 GMTSecurityhttps://www.anthonybahn.com/news/fortimail-cve-2026-104286-path-traversal-null-byte-file-write-exploited-cisa-kev/https://www.anthonybahn.com/news/fortimail-cve-2026-104286-path-traversal-null-byte-file-write-exploited-cisa-kev/An unauthenticated path traversal and null-byte flaw lets attackers write files to FortiMail and plant an implant. CVSS 9.8, exploited in the wild, no patch yet, CISA KEV deadline 4 October.Fri, 02 Oct 2026 13:09:35 GMTSecurityhttps://www.anthonybahn.com/news/cisco-catalyst-sd-wan-manager-cve-2026-76504-encoding-auth-bypass-exploited-cisa-kev/https://www.anthonybahn.com/news/cisco-catalyst-sd-wan-manager-cve-2026-76504-encoding-auth-bypass-exploited-cisa-kev/An unauthenticated attacker can take over Cisco Catalyst SD-WAN Manager by percent-encoding one character in a request. CVSS 9.8, actively exploited, no workaround, KEV deadline 3 October.Thu, 01 Oct 2026 13:10:44 GMTSecurityhttps://www.anthonybahn.com/news/apple-coregraphics-cve-2026-86950-zero-day-ios-26-7-1-cisa-kev/https://www.anthonybahn.com/news/apple-coregraphics-cve-2026-86950-zero-day-ios-26-7-1-cisa-kev/Apple patched an exploited CoreGraphics out-of-bounds write on iOS 26, iPadOS 26 and two macOS branches; iOS 27 was never affected. CISA gave federal agencies until 2 October.Wed, 30 Sep 2026 13:07:38 GMTSecurityhttps://www.anthonybahn.com/news/kiteworks-precautionary-shutdown-advanced-forms-vulnerability-federal-threat-intel/https://www.anthonybahn.com/news/kiteworks-precautionary-shutdown-advanced-forms-vulnerability-federal-threat-intel/Kiteworks told every customer to power off over the 26 September weekend after a federal warning, then fixed a critical Advanced Forms flaw. No CVE, no confirmed compromise, one design gap.Tue, 29 Sep 2026 13:11:07 GMTSecurityhttps://www.anthonybahn.com/news/citrix-netscaler-cve-2026-88771-88772-zero-day-rce-exploited-cisa-kev/https://www.anthonybahn.com/news/citrix-netscaler-cve-2026-88771-88772-zero-day-rce-exploited-cisa-kev/Two unauthenticated RCE flaws in NetScaler ADC and Gateway were exploited before Citrix's 27 September bulletin. One hits the default config; CISA set a 30 September deadline with forensic triage.Mon, 28 Sep 2026 13:08:11 GMTSecurityhttps://www.anthonybahn.com/news/peoplesoft-cve-2026-35273-shinyhunters-url-encoding-waf-bypass/https://www.anthonybahn.com/news/peoplesoft-cve-2026-35273-shinyhunters-url-encoding-waf-bypass/ShinyHunters restarted mass exploitation of Oracle PeopleSoft flaw CVE-2026-35273 by percent-encoding one byte of the URL to slip past WAF rules that blocked the vulnerable path.Sun, 27 Sep 2026 13:10:55 GMTSecurityhttps://www.anthonybahn.com/news/sharepoint-cve-2026-65660-spoofing-reclassified-rce-exploited-cisa-kev/https://www.anthonybahn.com/news/sharepoint-cve-2026-65660-spoofing-reclassified-rce-exploited-cisa-kev/Microsoft first rated CVE-2026-65660 a moderate SharePoint spoofing bug, then reclassified it as remote code execution. Attackers are now exploiting it, and CISA set a 28 September deadline.Sat, 26 Sep 2026 13:09:13 GMTSecurityhttps://www.anthonybahn.com/news/wso2-api-manager-cve-2026-5430-jwt-auth-bypass-cisa-kev/https://www.anthonybahn.com/news/wso2-api-manager-cve-2026-5430-jwt-auth-bypass-cisa-kev/Attackers are sending forged admin tokens to WSO2 API gateways, exploiting a JWT algorithm bypass patched in May. CISA gives agencies until 27 September; the KEV entry mislabels the bug.Fri, 25 Sep 2026 13:07:52 GMTSecurityhttps://www.anthonybahn.com/news/wordpress-core-cve-2026-87902-unauthenticated-lfi-rce-exploited/https://www.anthonybahn.com/news/wordpress-core-cve-2026-87902-unauthenticated-lfi-rce-exploited/A file-inclusion flaw in WordPress core lets unauthenticated attackers reach code execution on sites that meet two common conditions. Patched in 7.1.2; exploited within hours of release.Thu, 24 Sep 2026 13:09:34 GMTSecurityhttps://www.anthonybahn.com/news/f5-big-ip-apm-cve-2026-94127-oauth-authorization-server-heap-overflow-exploited/https://www.anthonybahn.com/news/f5-big-ip-apm-cve-2026-94127-oauth-authorization-server-heap-overflow-exploited/A heap overflow in BIG-IP APM's OAuth handling gives unauthenticated attackers code execution in the data plane. F5 confirms exploitation, ships ENG hotfixes; CISA sets a 25 September deadline.Wed, 23 Sep 2026 13:10:50 GMTSecurityhttps://www.anthonybahn.com/news/zyxel-gs1900-cve-2026-7273-switches-config-exfiltration-cisa-kev/https://www.anthonybahn.com/news/zyxel-gs1900-cve-2026-7273-switches-config-exfiltration-cisa-kev/A pre-auth stack overflow in the GS1900 web interface, patched in June, was used in August to pull configs and root hashes from 996 switches in 48 countries. CISA set a 24 September deadline.Tue, 22 Sep 2026 13:10:06 GMTNetworkinghttps://www.anthonybahn.com/news/orkes-conductor-cve-2026-58138-unauthenticated-graalvm-evaluator-rce/https://www.anthonybahn.com/news/orkes-conductor-cve-2026-58138-unauthenticated-graalvm-evaluator-rce/An unauthenticated attacker can submit a workflow whose inline script task runs OS commands as the Conductor process, often root. Patched in 3.30.2; exploited in the wild since August, not yet in CISA KEV.Mon, 21 Sep 2026 13:10:29 GMTSecurityhttps://www.anthonybahn.com/news/brevo-supply-chain-attack-cloudflare-worker-clickfix-wordpress-backdoor/https://www.anthonybahn.com/news/brevo-supply-chain-attack-cloudflare-worker-clickfix-wordpress-backdoor/A hardcoded Cloudflare API key let an attacker deploy an edge Worker that rewrote Brevo's embedded scripts for five hours, serving ClickFix lures and a hidden WordPress backdoor to 100,000+ sites.Sun, 20 Sep 2026 13:15:30 GMTSecurityhttps://www.anthonybahn.com/news/cisa-kev-three-linux-kernel-flaws-ktls-af-alg-ebtables-exploited/https://www.anthonybahn.com/news/cisa-kev-three-linux-kernel-flaws-ktls-af-alg-ebtables-exploited/CISA put three Linux kernel bugs on KEV with a 21 September deadline: a kTLS record-handling flaw with a public root exploit, an AF_ALG race, and an ebtables SNAT out-of-bounds write.Sat, 19 Sep 2026 13:10:12 GMTSecurityhttps://www.anthonybahn.com/news/acronis-backup-plugin-cve-2026-87886-cpanel-privilege-escalation-exploited/https://www.anthonybahn.com/news/acronis-backup-plugin-cve-2026-87886-cpanel-privilege-escalation-exploited/Acronis confirms targeted exploitation of a permissions flaw in its cPanel & WHM backup plugin. One low-privileged tenant account reaches root-level backup operations. CISA's deadline is 19 September.Fri, 18 Sep 2026 13:08:09 GMTSecurityhttps://www.anthonybahn.com/news/cisco-ise-cve-2026-76460-api-auth-bypass-root-exploited/https://www.anthonybahn.com/news/cisco-ise-cve-2026-76460-api-auth-bypass-root-exploited/Cisco confirms in-the-wild exploitation of a CVSS 10.0 authentication bypass in Identity Services Engine. One crafted API request skips the login page and lands root. CISA's deadline is 19 September.Thu, 17 Sep 2026 13:08:10 GMTSecurityhttps://www.anthonybahn.com/news/vmware-vcenter-cve-2026-59310-syslog-traversal-ransomware-esxi/https://www.anthonybahn.com/news/vmware-vcenter-cve-2026-59310-syslog-traversal-ransomware-esxi/CISA's KEV catalog now marks the unauthenticated vCenter Syslog RCE CVE-2026-59310 as used in ransomware. A syslog write becomes root, then forged SSO tokens and Babuk-derived encryption on ESXi.Wed, 16 Sep 2026 13:11:58 GMTSecurityhttps://www.anthonybahn.com/news/cisco-secure-email-gateway-cve-2026-76461-sql-injection-root-exploited/https://www.anthonybahn.com/news/cisco-secure-email-gateway-cve-2026-76461-sql-injection-root-exploited/A SQL injection bug in Cisco Secure Email Gateway's mail parser gives unauthenticated attackers root from a single message. Cisco confirms exploitation; CISA set a 17 September deadline.Tue, 15 Sep 2026 13:09:05 GMTSecurityhttps://www.anthonybahn.com/news/check-point-vpn-cve-2026-85102-85103-rce-ncsc-exploitation-imminent/https://www.anthonybahn.com/news/check-point-vpn-cve-2026-85102-85103-rce-ncsc-exploitation-imminent/Two CVSS 9.8 bugs in Check Point's VPN certificate handling give unauthenticated remote code execution on gateways and management servers. Patches are out; NCSC-NL expects mass exploitation soon.Mon, 14 Sep 2026 13:08:22 GMTSecurityhttps://www.anthonybahn.com/news/connectwise-screenconnect-cve-2026-84869-worm-file-transfer-exploited/https://www.anthonybahn.com/news/connectwise-screenconnect-cve-2026-84869-worm-file-transfer-exploited/A CVSS 9.9 authorization flaw in the ScreenConnect client lets a remote session run files without confirmation. Huntress found it spreading like a worm; CISA set a 14 September deadline.Sun, 13 Sep 2026 13:10:44 GMTSecurityhttps://www.anthonybahn.com/news/gitlab-cve-2026-85706-commits-api-path-traversal-exploited/https://www.anthonybahn.com/news/gitlab-cve-2026-85706-commits-api-path-traversal-exploited/A CVSS 10.0 path traversal in GitLab's repository commits API lets unauthenticated attackers read server files. Probes began within a day; CISA set a 14 September deadline.Sat, 12 Sep 2026 13:07:39 GMTSecurityhttps://www.anthonybahn.com/news/fortinet-cve-2025-25249-cw-acd-capwap-exploited-pivotc2/https://www.anthonybahn.com/news/fortinet-cve-2025-25249-cw-acd-capwap-exploited-pivotc2/Fortinet's cw_acd CAPWAP daemon carries a critical unauthenticated overflow, CVE-2025-25249, exploited since July to deploy the PivotC2 RAT. CISA set a 12 September patch deadline.Fri, 11 Sep 2026 13:10:27 GMTSecurityhttps://www.anthonybahn.com/news/cisco-fmc-cve-2026-20079-auth-bypass-exploited-sandworm-qilin/https://www.anthonybahn.com/news/cisco-fmc-cve-2026-20079-auth-bypass-exploited-sandworm-qilin/Cisco confirms active exploitation of CVE-2026-20079. Talos describes three clusters and assesses, but does not definitively identify, links to Sandworm and Qilin-related activity.Thu, 10 Sep 2026 13:10:08 GMTSecurityhttps://www.anthonybahn.com/news/microsoft-september-2026-patch-tuesday-974-cves-two-exploited-zero-days/https://www.anthonybahn.com/news/microsoft-september-2026-patch-tuesday-974-cves-two-exploited-zero-days/Microsoft's largest-ever Patch Tuesday fixes roughly 970 CVEs, including two exploited Windows zero-days now in CISA KEV and 20 wormable RCE bugs. Triage by exploitation, not CVSS.Wed, 09 Sep 2026 13:07:47 GMTSecurityhttps://www.anthonybahn.com/news/adobe-commerce-magento-stylesmuggler-cve-2026-75650-exploited/https://www.anthonybahn.com/news/adobe-commerce-magento-stylesmuggler-cve-2026-75650-exploited/A CVSS 10.0 unauthenticated RCE in Adobe Commerce and Magento was exploited for three days before Adobe's 7 September hotfix. Patch VULN-39341, then rotate the encryption key and every credential it protected.Tue, 08 Sep 2026 13:09:16 GMTSecurityhttps://www.anthonybahn.com/news/n-able-n-central-cve-2026-86218-pre-auth-rce-zero-day-exploited/https://www.anthonybahn.com/news/n-able-n-central-cve-2026-86218-pre-auth-rce-zero-day-exploited/A pre-auth RCE in N-able's RMM console was exploited before Hotfix 4 shipped. Upgrade on-prem servers to build 2026.3.1.14, then audit accounts, Take Control sessions and endpoints for tunnels.Mon, 07 Sep 2026 13:07:43 GMTSecurityhttps://www.anthonybahn.com/news/mikrotik-routeros-mikrotrick-ssh-chain-cve-2026-67276-86060-exploited/https://www.anthonybahn.com/news/mikrotik-routeros-mikrotrick-ssh-chain-cve-2026-67276-86060-exploited/CERT Polska disclosed six RouterOS flaws; two chain into unauthenticated SSH takeover, exploited since 2 September. Patch to 6.49.21, 7.23.4 or 7.24.2 and check for the flagged state.Sun, 06 Sep 2026 13:13:46 GMTSecurityhttps://www.anthonybahn.com/news/chrome-cve-2026-85046-v8-zero-day-cisa-kev-chromium-forks/https://www.anthonybahn.com/news/chrome-cve-2026-85046-v8-zero-day-cisa-kev-chromium-forks/Google's sixth exploited Chrome zero-day of 2026 is a V8 type confusion now in CISA KEV. Edge, Brave and Opera patched within two days; Electron apps and WebView2 bundles lag behind.Sat, 05 Sep 2026 13:09:05 GMTSecurityhttps://www.anthonybahn.com/news/litellm-cve-2026-59822-mcp-auth-bypass-cisa-kev/https://www.anthonybahn.com/news/litellm-cve-2026-59822-mcp-auth-bypass-cisa-kev/Any bearer token opened an authenticated MCP session on LiteLLM below 1.84.0. Wiz honeypots caught attackers probing it, mining Monero, and lifting provider keys from memory.Fri, 04 Sep 2026 13:09:43 GMTSecurityhttps://www.anthonybahn.com/news/sonicwall-sma1000-cve-2026-83548-ssrf-command-injection-exploited/https://www.anthonybahn.com/news/sonicwall-sma1000-cve-2026-83548-ssrf-command-injection-exploited/A pre-auth SSRF chained with a command injection gives attackers root on SMA1000 appliances. SonicWall confirmed exploitation on day one; CISA's deadline is September 5.Thu, 03 Sep 2026 13:07:37 GMTSecurityhttps://www.anthonybahn.com/news/jfrog-artifactory-cve-2026-82329-auth-bypass-exploited/https://www.anthonybahn.com/news/jfrog-artifactory-cve-2026-82329-auth-bypass-exploited/Attackers began forging administrator tokens on unpatched self-hosted Artifactory servers within days of the August 28 patch. Update, then audit tokens and accounts.Wed, 02 Sep 2026 13:07:57 GMTSecurityhttps://www.anthonybahn.com/news/exchange-cve-2026-62911-auth-bypass-exposed-servers/https://www.anthonybahn.com/news/exchange-cve-2026-62911-auth-bypass-exposed-servers/A high-severity authentication-bypass flaw in on-prem Exchange now has public exploit code, and Shadowserver counts almost 22,000 unpatched servers still reachable from the internet.Tue, 01 Sep 2026 13:08:19 GMTSecurityhttps://www.anthonybahn.com/news/terminalfix-clickfix-powershell-reverse-tunnel/https://www.anthonybahn.com/news/terminalfix-clickfix-powershell-reverse-tunnel/Microsoft details TerminalFix, a ClickFix variant that steers users to Windows Terminal, sideloads a DLL through a signed binary, and drops a Python reverse-tunnel implant for internal network access.Mon, 31 Aug 2026 13:09:15 GMTSecurityhttps://www.anthonybahn.com/news/owncloud-cve-2023-49105-cisa-kev-nuclear-records/https://www.anthonybahn.com/news/owncloud-cve-2023-49105-cisa-kev-nuclear-records/CISA added a two-year-old ownCloud authentication bypass to its KEV catalog on August 27 after attackers used it to steal nuclear-research files from a Philippine agency.Fri, 28 Aug 2026 13:09:12 GMTSecurityhttps://www.anthonybahn.com/news/papercut-ng-mf-zero-day-exploited-august-2026/https://www.anthonybahn.com/news/papercut-ng-mf-zero-day-exploited-august-2026/PaperCut confirms customer incidents from an undisclosed, remotely exploitable flaw in NG and MF. Emergency patches are out; the vendor's first instruction is to cut internet access to the web interface.Thu, 27 Aug 2026 18:51:49 GMTSecurityhttps://www.anthonybahn.com/news/gitea-cve-2026-60004-diffpatch-rce-cisa-kev/https://www.anthonybahn.com/news/gitea-cve-2026-60004-diffpatch-rce-cisa-kev/CISA added Gitea CVE-2026-60004 to the KEV catalog on August 25 after attackers used the diffpatch endpoint to plant Git hooks and drop miners. Federal deadline: August 28.Wed, 26 Aug 2026 13:05:27 GMTSecurityhttps://www.anthonybahn.com/news/zimbra-cve-2026-73570-snmp-rce-actively-exploited/https://www.anthonybahn.com/news/zimbra-cve-2026-73570-snmp-rce-actively-exploited/Attackers are exploiting an unauthenticated command injection in Zimbra's SNMP notification path. Patch to 10.1.20, then hunt for web shells dropped by the zimbra user.Tue, 25 Aug 2026 15:37:35 GMTSecurityhttps://www.anthonybahn.com/news/modern-phishing-defense/https://www.anthonybahn.com/news/modern-phishing-defense/Phishing attacks are evolving with AI and multi-channel tactics. Learn the immediate actions and technical details IT pros need for robust detection and response.Fri, 17 Apr 2026 23:04:54 GMTSecurityhttps://www.anthonybahn.com/news/critical-oracle-identity-manager-flaw-cve-2025-61757/https://www.anthonybahn.com/news/critical-oracle-identity-manager-flaw-cve-2025-61757/A critical authentication bypass vulnerability (CVE-2025-61757) in Oracle Identity Manager is being actively exploited. Learn how to protect your systems now.Fri, 17 Apr 2026 23:04:53 GMTSecurityhttps://www.anthonybahn.com/news/critical-rce-flaw-oracle-iam-cve-2026-21992/https://www.anthonybahn.com/news/critical-rce-flaw-oracle-iam-cve-2026-21992/Oracle warns that CVE-2026-21992 is a critical, unauthenticated HTTP remote-code-execution flaw affecting specific Oracle Identity Manager and Web Services Manager versions.Fri, 17 Apr 2026 23:04:52 GMTSecurityhttps://www.anthonybahn.com/news/what-is-endpoint-detection-and-response/https://www.anthonybahn.com/news/what-is-endpoint-detection-and-response/Traditional antivirus is not enough. Learn how Endpoint Detection and Response (EDR) provides the visibility and tools to stop sophisticated cyberattacks.Fri, 17 Apr 2026 23:04:51 GMTSecurityhttps://www.anthonybahn.com/news/dell-api-breach-exposes-49m-records/https://www.anthonybahn.com/news/dell-api-breach-exposes-49m-records/A major API vulnerability at Dell exposed 49 million customer records. Learn the technical details, immediate actions for IT pros, and how to prevent it.Fri, 17 Apr 2026 23:04:49 GMTSecurityhttps://www.anthonybahn.com/news/api-security-broken-object-level-authorization/https://www.anthonybahn.com/news/api-security-broken-object-level-authorization/A critical API vulnerability, Broken Object Level Authorization (BOLA), is leaving millions of user records exposed. Learn how to protect your systems now.Fri, 17 Apr 2026 23:04:48 GMTSecurityhttps://www.anthonybahn.com/news/cloud-security-misconfigurations-threat/https://www.anthonybahn.com/news/cloud-security-misconfigurations-threat/Unsecured cloud services are a leading cause of data breaches. Learn to identify and fix common cloud security misconfigurations before they are exploited.Fri, 17 Apr 2026 23:04:43 GMTSecurityhttps://www.anthonybahn.com/news/ransomware-defense-strategies-2026/https://www.anthonybahn.com/news/ransomware-defense-strategies-2026/As AI-powered ransomware evolves in 2026, legacy defenses are obsolete. Learn crucial strategies to protect your organization from advanced persistent threats.Fri, 17 Apr 2026 23:04:42 GMTSecurityhttps://www.anthonybahn.com/news/api-security-vulnerabilities-exposed/https://www.anthonybahn.com/news/api-security-vulnerabilities-exposed/Recent vulnerabilities highlight critical API security risks. Learn how to protect your systems from data breaches and unauthorized access. Actionable advice for IT pros.Fri, 17 Apr 2026 23:04:39 GMTSecurityhttps://www.anthonybahn.com/news/what-is-a-security-operations-center-soc/https://www.anthonybahn.com/news/what-is-a-security-operations-center-soc/A deep dive into the Security Operations Center (SOC), the people, processes, and technology that form the core of modern cybersecurity defenses.Fri, 17 Apr 2026 23:04:38 GMTSecurityhttps://www.anthonybahn.com/news/data-loss-prevention-strategies-2026/https://www.anthonybahn.com/news/data-loss-prevention-strategies-2026/Learn how to implement effective Data Loss Prevention (DLP) strategies to protect your organization's sensitive data from breaches and insider threats.Fri, 17 Apr 2026 23:04:37 GMTSecurityhttps://www.anthonybahn.com/news/vulnerability-management-programs-guide/https://www.anthonybahn.com/news/vulnerability-management-programs-guide/Essential strategies for implementing robust vulnerability management programs that identify, assess, and remediate security weaknesses before attackers exploit them.Fri, 17 Apr 2026 23:04:34 GMTSecurityhttps://www.anthonybahn.com/news/weekly-security-roundup-critical-patches-threats/https://www.anthonybahn.com/news/weekly-security-roundup-critical-patches-threats/This week's top cybersecurity alerts: critical vulnerabilities in enterprise software, active ransomware campaigns, and essential security patches.Fri, 17 Apr 2026 23:04:32 GMTSecurityhttps://www.anthonybahn.com/news/ransomware-defense-preventing-access-broker-infiltration/https://www.anthonybahn.com/news/ransomware-defense-preventing-access-broker-infiltration/Initial access brokers are selling network credentials to ransomware gangs, making prevention critical. Organizations must strengthen authentication and monitor for compromised credentials before attackers strike.Thu, 26 Mar 2026 11:04:05 GMTSecurityhttps://www.anthonybahn.com/news/how-law-enforcement-disrupts-ransomware-access-broker-networks/https://www.anthonybahn.com/news/how-law-enforcement-disrupts-ransomware-access-broker-networks/Law enforcement agencies are taking down ransomware access broker networks that sell entry points into corporate systems. These disruptions cut off critical supply chains that enable devastating cyberattacks.Thu, 26 Mar 2026 11:03:53 GMTSecurityhttps://www.anthonybahn.com/news/russian-access-broker-jailed-for-ransomware-support-operations/https://www.anthonybahn.com/news/russian-access-broker-jailed-for-ransomware-support-operations/A Russian access broker received prison time for enabling ransomware attacks by providing cybercriminals entry to corporate networks. This case highlights ongoing efforts to dismantle the infrastructure supporting ransomware operations.Thu, 26 Mar 2026 11:03:34 GMTSecurityhttps://www.anthonybahn.com/news/incident-response-procedures-for-critical-network-vulnerabilities/https://www.anthonybahn.com/news/incident-response-procedures-for-critical-network-vulnerabilities/Organizations must act immediately when critical network vulnerabilities are discovered as attackers exploit them within hours. Effective incident response requires pre-planned procedures, rapid patching, and coordinated communication across security teams.Tue, 24 Mar 2026 11:49:12 GMTSecurityhttps://www.anthonybahn.com/news/mitigating-citrix-netscaler-vulnerabilities-in-enterprise-networks/https://www.anthonybahn.com/news/mitigating-citrix-netscaler-vulnerabilities-in-enterprise-networks/Citrix NetScaler vulnerabilities pose critical risks to enterprise networks, enabling attackers to gain unauthorized access and compromise sensitive data. Organizations must immediately patch affected systems and implement security controls to prevent exploitation before threat actors strike.Tue, 24 Mar 2026 11:48:56 GMTSecurityhttps://www.anthonybahn.com/news/oracle-emergency-patch-critical-identity-manager-cve-2026-21992/https://www.anthonybahn.com/news/oracle-emergency-patch-critical-identity-manager-cve-2026-21992/Oracle released an emergency patch for a critical vulnerability in Identity Manager (CVE-2026-21992) that allows remote attackers to take complete control of affected systems. Organizations must apply this out-of-band security update immediately.Mon, 23 Mar 2026 11:03:23 GMTSecurityhttps://www.anthonybahn.com/news/byovd-attacks-defending-against-driver-exploitation-threats/https://www.anthonybahn.com/news/byovd-attacks-defending-against-driver-exploitation-threats/BYOVD attacks exploit legitimate signed drivers to bypass security controls and gain kernel-level access to systems. Organizations must implement driver allowlisting and monitor for suspicious driver activity to prevent attackers from weaponizing trusted software against them.Sat, 21 Mar 2026 11:03:54 GMTSecurityhttps://www.anthonybahn.com/news/defending-against-driver-level-attacks-and-edr-evasion-techniques/https://www.anthonybahn.com/news/defending-against-driver-level-attacks-and-edr-evasion-techniques/Attackers are exploiting driver-level vulnerabilities to bypass EDR security tools, putting critical systems at risk. Organizations must update defenses immediately to detect and block these advanced evasion techniques.Sat, 21 Mar 2026 11:03:53 GMTSecurityhttps://www.anthonybahn.com/news/incident-response-for-ransomware-zero-day-vulnerabilities/https://www.anthonybahn.com/news/incident-response-for-ransomware-zero-day-vulnerabilities/Ransomware attacks and zero-day exploits demand immediate action before critical data is compromised. Organizations need robust incident response plans to detect, contain, and recover from these threats quickly.Fri, 20 Mar 2026 11:05:16 GMTSecurityhttps://www.anthonybahn.com/news/mitigating-cisa-flagged-zimbra-sharepoint-vulnerabilities/https://www.anthonybahn.com/news/mitigating-cisa-flagged-zimbra-sharepoint-vulnerabilities/CISA has flagged critical vulnerabilities in Zimbra and SharePoint requiring immediate action. Organizations must patch these exploited flaws now to prevent potential breaches and data theft.Fri, 20 Mar 2026 11:05:00 GMTSecurityhttps://www.anthonybahn.com/news/mitigating-unpatched-telnetd-flaws-in-legacy-enterprise-systems/https://www.anthonybahn.com/news/mitigating-unpatched-telnetd-flaws-in-legacy-enterprise-systems/Critical vulnerabilities in outdated Telnetd services expose legacy enterprise systems to remote attacks. Organizations must immediately implement network segmentation and access controls while planning system upgrades.Thu, 19 Mar 2026 11:04:58 GMTSecurityhttps://www.anthonybahn.com/news/telnetd-cve-2026-32746-unpatched-flaw-grants-remote-root-access/https://www.anthonybahn.com/news/telnetd-cve-2026-32746-unpatched-flaw-grants-remote-root-access/A critical unpatched vulnerability in Telnetd allows attackers to gain remote root access to affected systems. Organizations must immediately disable Telnet services and implement SSH as a secure alternative.Thu, 19 Mar 2026 11:03:58 GMTSecurityhttps://www.anthonybahn.com/news/cisa-flagged-vulnerabilities-in-enterprise-file-transfer-systems/https://www.anthonybahn.com/news/cisa-flagged-vulnerabilities-in-enterprise-file-transfer-systems/CISA has identified critical vulnerabilities in enterprise file transfer systems that attackers are actively exploiting. Organizations must immediately patch these flaws to prevent data breaches and system compromises.Wed, 18 Mar 2026 11:03:42 GMTSecurityhttps://www.anthonybahn.com/news/advanced-persistent-threat-detection-response-implementation/https://www.anthonybahn.com/news/advanced-persistent-threat-detection-response-implementation/Advanced persistent threats are infiltrating networks undetected for months, causing massive data breaches. Implementing robust detection and response systems now is critical to protect your organization.Tue, 17 Mar 2026 11:04:04 GMTSecurityhttps://www.anthonybahn.com/news/ai-security-risks-enterprise-mitigation-strategies-for-2024/https://www.anthonybahn.com/news/ai-security-risks-enterprise-mitigation-strategies-for-2024/AI systems face growing threats from data poisoning and prompt injection attacks. Enterprises must implement zero-trust architectures and continuous monitoring to protect AI models in 2024.Tue, 17 Mar 2026 11:03:56 GMTSecurityhttps://www.anthonybahn.com/news/secure-remote-access-mitigating-rce-vulnerabilities-in-2024/https://www.anthonybahn.com/news/secure-remote-access-mitigating-rce-vulnerabilities-in-2024/Remote code execution vulnerabilities in VPNs and remote access tools surged in 2024, enabling attackers to gain complete system control. Organizations must immediately patch critical flaws and implement zero-trust architecture to prevent devastating breaches.Mon, 16 Mar 2026 11:03:50 GMTSecurityhttps://www.anthonybahn.com/news/windows-11-oob-hotpatch-fixes-critical-rras-rce-vulnerability/https://www.anthonybahn.com/news/windows-11-oob-hotpatch-fixes-critical-rras-rce-vulnerability/Microsoft released an urgent out-of-band hotpatch for Windows 11 to fix a critical remote code execution flaw in RRAS that attackers could exploit. Organizations should apply this security update immediately.Mon, 16 Mar 2026 11:03:10 GMTSecurityhttps://www.anthonybahn.com/news/critical-hpe-aos-cx-flaw-enables-unauthorized-admin-password-resets/https://www.anthonybahn.com/news/critical-hpe-aos-cx-flaw-enables-unauthorized-admin-password-resets/A critical vulnerability in HPE Aruba Networking AOS-CX switches allows attackers to reset admin passwords without authentication. Organizations must patch immediately to prevent unauthorized access and network compromise.Sun, 15 Mar 2026 11:02:59 GMTSecurityhttps://www.anthonybahn.com/news/deepfake-as-a-service-threatens-banks-with-ai-impersonation-attacks/https://www.anthonybahn.com/news/deepfake-as-a-service-threatens-banks-with-ai-impersonation-attacks/Cybercriminals now offer deepfake services that enable AI-powered impersonation attacks targeting banks and their customers. Financial institutions must act now to deploy detection tools before fraudsters exploit this growing threat.Wed, 11 Mar 2026 11:06:30 GMTSecurityhttps://www.anthonybahn.com/news/why-google-cybersecurity-researchers-are-asking-iphone-users-to-update-their-phones-immediately-/https://www.anthonybahn.com/news/why-google-cybersecurity-researchers-are-asking-iphone-users-to-update-their-phones-immediately-/Mobiles & Tablets News: Google cybersecurity researchers are urging iPhone users to update their devices to the latest version of iOS immediately. This comes after the Google....Sun, 08 Mar 2026 23:05:23 GMTSecurityhttps://www.anthonybahn.com/news/apple-still-has-over-a-dozen-products-in-the-pipeline-for-2026-here-s-what-s-coming-9to5mac/https://www.anthonybahn.com/news/apple-still-has-over-a-dozen-products-in-the-pipeline-for-2026-here-s-what-s-coming-9to5mac/Apple just wrapped up a very exciting week of announcements – starting off with iPhone 17e, and ending with MacBook......Sun, 08 Mar 2026 11:08:28 GMTSecurityhttps://www.anthonybahn.com/news/barracuda-warns-supply-chain-attacks-target-dev-infrastructure/https://www.anthonybahn.com/news/barracuda-warns-supply-chain-attacks-target-dev-infrastructure/Barracuda warns that cybercriminals are increasingly targeting developer infrastructure in supply chain attacks. Organizations must urgently secure their development environments to prevent widespread breaches affecting multiple downstream customers.Sun, 08 Mar 2026 11:06:31 GMTSecurityhttps://www.anthonybahn.com/news/armis-predicts-enterprise-breach-from-autonomous-ai-by-mid-2026/https://www.anthonybahn.com/news/armis-predicts-enterprise-breach-from-autonomous-ai-by-mid-2026/Cybersecurity firm Armis warns that autonomous AI systems will likely cause a major enterprise breach by mid-2026. Organizations must prepare now for AI-driven threats that can operate independently.Sat, 07 Mar 2026 12:06:22 GMTSecurityhttps://www.anthonybahn.com/news/nearly-half-of-exploited-zero-day-flaws-target-enterprise-grade-technology-cybersecurity-dive/https://www.anthonybahn.com/news/nearly-half-of-exploited-zero-day-flaws-target-enterprise-grade-technology-cybersecurity-dive/Software companies cheered the elimination of a government-wide attestation mandate. What comes next could be messy. By Eric Geller • Jan. 28, 2026 · Subscribe to Cybersecurity Dive for top news,...Sat, 07 Mar 2026 00:05:45 GMTSecurityhttps://www.anthonybahn.com/news/cyberstrike-ai-fortigate-attacks-55-countries/https://www.anthonybahn.com/news/cyberstrike-ai-fortigate-attacks-55-countries/Open-source CyberStrikeAI platform exploited by threat actors in coordinated attacks targeting FortiGate systems across 55 countries.Fri, 06 Mar 2026 12:00:49 GMTSecurityhttps://www.anthonybahn.com/news/ai-socs-struggle-with-tier-1-analyst-gaps-amid-2026-threat-surge/https://www.anthonybahn.com/news/ai-socs-struggle-with-tier-1-analyst-gaps-amid-2026-threat-surge/AI-powered security operations centers face a critical shortage of Tier 1 analysts as cyber threats are projected to intensify in 2026. Organizations must act now to address this talent gap or risk being overwhelmed by increasingly sophisticated attacks.Fri, 06 Mar 2026 00:07:30 GMTSecurityhttps://www.anthonybahn.com/news/ai-driven-social-engineering-ml-powered-phishing-attacks/https://www.anthonybahn.com/news/ai-driven-social-engineering-ml-powered-phishing-attacks/AI is now powering sophisticated phishing attacks that adapt in real-time to victim behavior, making them nearly impossible to detect. Organizations must upgrade defenses immediately.Wed, 04 Mar 2026 12:33:10 GMTSecurityhttps://www.anthonybahn.com/news/critical-chrome-vulnerability-enables-privilege-escalation-attack/https://www.anthonybahn.com/news/critical-chrome-vulnerability-enables-privilege-escalation-attack/Google has patched a critical Chrome vulnerability that allows attackers to gain elevated system privileges. Users should update immediately to protect against active exploitation attempts.Wed, 04 Mar 2026 00:51:50 GMTSecurityhttps://www.anthonybahn.com/news/fake-google-security-site-uses-pwa-app-to-steal-credentials-mfa-codes/https://www.anthonybahn.com/news/fake-google-security-site-uses-pwa-app-to-steal-credentials-mfa-codes/If an app called “System Service” ... > Security > Device admin apps and then uninstall it. Malwarebytes researchers also provide detailed steps for removing the malicious web app from both Chrom...Tue, 03 Mar 2026 12:04:37 GMTSecurityhttps://www.anthonybahn.com/news/4-data-security-incidents-to-know-about-february-2026-security-magazine/https://www.anthonybahn.com/news/4-data-security-incidents-to-know-about-february-2026-security-magazine/Poor data security comes with consequences, and not just consequences for the entity protecting said data — but for interconnected partners and the individuals the data is associated to, as well....Tue, 03 Mar 2026 00:09:13 GMTSecurityhttps://www.anthonybahn.com/news/xrp-price-news-2026-reflects-weakness-degens-back-deepsnitch-ai-for-100x-surge-while-power-proto/https://www.anthonybahn.com/news/xrp-price-news-2026-reflects-weakness-degens-back-deepsnitch-ai-for-100x-surge-while-power-proto/XRP price news shows a downtrend as Chainalysis reports ransomware incidents spike 50%, yet payouts decline. Degens back DeepSnitch AI for 100X returns as Power Protocol faces correction....Mon, 02 Mar 2026 00:08:18 GMTSecurityhttps://www.anthonybahn.com/news/cve-2026-28415-critical-oauth-flaw-in-gradio-threatens-ai-apps/https://www.anthonybahn.com/news/cve-2026-28415-critical-oauth-flaw-in-gradio-threatens-ai-apps/A critical OAuth vulnerability in Gradio framework allows attackers to hijack AI application accounts through malicious authorization flows. Organizations using Gradio must patch immediately to prevent widespread account takeovers.Sun, 01 Mar 2026 12:03:12 GMTSecurityhttps://www.anthonybahn.com/news/this-massive-healthcare-data-breach-is-even-bigger-than-previously-reported-lifehacker/https://www.anthonybahn.com/news/this-massive-healthcare-data-breach-is-even-bigger-than-previously-reported-lifehacker/Entertainment Tech Read Full Bio February 26, 2026 Add as a preferred source on Google Add as a preferred source on Google ... The data breach itself isn't new—it was initially disclosed in Janua...Fri, 27 Feb 2026 14:37:29 GMTSecurityhttps://www.anthonybahn.com/news/f5-to-participate-in-upcoming-financial-conference/https://www.anthonybahn.com/news/f5-to-participate-in-upcoming-financial-conference/More News From F5, Inc. ... SEATTLE--(BUSINESS WIRE)--F5, Inc. (NASDAQ: FFIV), the global leader in delivering and securing every app and API, today announced financial results for its first quar...Thu, 26 Feb 2026 14:51:15 GMTSecurityhttps://www.anthonybahn.com/news/nvidia-reports-earnings-and-guidance-beat-as-ai-boom-pushes-data-center-revenue-up-75/https://www.anthonybahn.com/news/nvidia-reports-earnings-and-guidance-beat-as-ai-boom-pushes-data-center-revenue-up-75/Nvidia has been the best performer on Wall Street this year among tech's megacap companies....Thu, 26 Feb 2026 00:49:40 GMTSecurityhttps://www.anthonybahn.com/news/ibm-2026-x-force-threat-index-ai-driven-attacks-are-escalating-as-basic-security-gaps-leave-ente/https://www.anthonybahn.com/news/ibm-2026-x-force-threat-index-ai-driven-attacks-are-escalating-as-basic-security-gaps-leave-ente//PRNewswire/ -- IBM (NYSE: IBM) today released the 2026 X-Force Threat Intelligence Index, revealing that cybercriminals are exploiting basic security gaps at......Wed, 25 Feb 2026 12:49:49 GMTSecurityhttps://www.anthonybahn.com/news/unsurprisingly-apple-s-board-gets-what-it-wants-in-2026-shareholder-meeting/https://www.anthonybahn.com/news/unsurprisingly-apple-s-board-gets-what-it-wants-in-2026-shareholder-meeting/The 2026 Apple shareholders meeting has again predictably gone the board's way, with shareholders agreeing to re-elect the existing board, pay them well, and ignore a proposal about China....Wed, 25 Feb 2026 01:45:03 GMTSecurityhttps://www.anthonybahn.com/news/what-s-new-in-android-s-february-2026-google-system-updates-u/https://www.anthonybahn.com/news/what-s-new-in-android-s-february-2026-google-system-updates-u/The monthly “Google System Release Notes” primarily detail what’s new in Play services, Play Store, and Play system update across......Tue, 24 Feb 2026 00:23:52 GMTSecurityhttps://www.anthonybahn.com/news/it-security-news-hourly-summary-2026-02-22-12h-1-posts-it-security-news/https://www.anthonybahn.com/news/it-security-news-hourly-summary-2026-02-22-12h-1-posts-it-security-news/Cybersecurity news and articles about information security, vulnerabilities, exploits, hacks, laws, spam, viruses, malware, breaches. ... Like Loading... ← UK council faces data breach claim afte...Mon, 23 Feb 2026 12:37:04 GMTSecurityhttps://www.anthonybahn.com/news/conduent-ransomware-breach-allegedly-affects-millions-across-states-fox-news/https://www.anthonybahn.com/news/conduent-ransomware-breach-allegedly-affects-millions-across-states-fox-news/Conduent ransomware attack affects tens of millions across multiple states, with 15.4 million Texas and 10.5 million Oregon residents potentially having data exposed....Mon, 23 Feb 2026 00:25:28 GMTSecurityhttps://www.anthonybahn.com/news/conduent-breach-explodes-from-4m-to-15m-victims/https://www.anthonybahn.com/news/conduent-breach-explodes-from-4m-to-15m-victims/If you receive a notification letter, do not throw it away thinking it is a scam. This is a legitimate data breach and the letters contain important information about free credit monitoring servi...Sun, 22 Feb 2026 12:23:30 GMTSecurityhttps://www.anthonybahn.com/news/new-android-banking-trojan-bypasses-google-play-protect/https://www.anthonybahn.com/news/new-android-banking-trojan-bypasses-google-play-protect/*November 2024* — Security researchers have uncovered a sophisticated new Android banking trojan that successfully evades Google Play Protect defenses, marking a concerning evolution in mobile ma...Sun, 22 Feb 2026 00:29:29 GMTSecurityhttps://www.anthonybahn.com/news/critical-ivanti-connect-secure-zero-day-under-active-exploitation/https://www.anthonybahn.com/news/critical-ivanti-connect-secure-zero-day-under-active-exploitation/Critical zero-day vulnerabilities in Ivanti Connect Secure VPN appliances are being actively exploited. Organizations must act immediately to assess exposure and implement mitigations.Sat, 21 Feb 2026 20:28:26 GMTSecurityhttps://www.anthonybahn.com/news/unleash-protocol-39m-smart-contract-exploit/https://www.anthonybahn.com/news/unleash-protocol-39m-smart-contract-exploit/Attackers gained multisig control and executed unauthorized contract upgrade to drain wrapped IP tokens, USDC, and ETH before laundering through Tornado Cash.Wed, 31 Dec 2025 19:35:29 GMTSecurityhttps://www.anthonybahn.com/news/ransomhouse-mario-encryptor-upgrade/https://www.anthonybahn.com/news/ransomhouse-mario-encryptor-upgrade/RansomHouse RaaS operation deploys new 'Mario' encryptor featuring dual-key encryption, dynamic chunk sizing, and enhanced anti-analysis capabilities targeting VMware ESXi environments.Sun, 21 Dec 2025 18:09:14 GMTSecurityhttps://www.anthonybahn.com/news/fortinet-sso-vulnerabilities-cve-2025-59718-59719-exploitation/https://www.anthonybahn.com/news/fortinet-sso-vulnerabilities-cve-2025-59718-59719-exploitation/Hackers are actively exploiting CVE-2025-59718 and CVE-2025-59719 to bypass FortiCloud SSO authentication and steal firewall configuration files from multiple Fortinet products.Tue, 16 Dec 2025 19:48:52 GMTSecurityhttps://www.anthonybahn.com/news/microsoft-blocks-outdated-activesync-exchange-online-march-2026/https://www.anthonybahn.com/news/microsoft-blocks-outdated-activesync-exchange-online-march-2026/Microsoft announces that devices running Exchange ActiveSync versions below 16.1 will lose access to Exchange Online after March 1, 2026, affecting millions of mobile email users.Tue, 16 Dec 2025 15:02:56 GMTSecurityhttps://www.anthonybahn.com/news/700credit-data-breach-5-8-million-records-api-vulnerability/https://www.anthonybahn.com/news/700credit-data-breach-5-8-million-records-api-vulnerability/700Credit reveals massive data breach affecting 5.8 million people after attackers exploited an API vulnerability through a compromised integration partner.Mon, 15 Dec 2025 19:31:36 GMTSecurityhttps://www.anthonybahn.com/news/windows-11-updates-breaking-vpn-wsl-december-2025/https://www.anthonybahn.com/news/windows-11-updates-breaking-vpn-wsl-december-2025/Recent Windows 11 security updates are causing VPN connectivity failures for enterprise users running Windows Subsystem for Linux with mirrored mode networking.Mon, 15 Dec 2025 16:02:50 GMTSecurityhttps://www.anthonybahn.com/news/consentfix-attack-hijacks-microsoft-accounts-azure-cli/https://www.anthonybahn.com/news/consentfix-attack-hijacks-microsoft-accounts-azure-cli/A new 'ConsentFix' attack tricks users into granting full Microsoft account access through Azure CLI OAuth flows—no password theft or MFA bypass required.Thu, 11 Dec 2025 16:51:56 GMTSecurityhttps://www.anthonybahn.com/news/fortinet-forticloud-sso-auth-bypass-flaws/https://www.anthonybahn.com/news/fortinet-forticloud-sso-auth-bypass-flaws/Fortinet releases patches for two critical 9.1 CVSS authentication bypass vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager.Wed, 10 Dec 2025 16:00:00 GMTSecurityhttps://www.anthonybahn.com/news/microsoft-december-2025-patch-tuesday/https://www.anthonybahn.com/news/microsoft-december-2025-patch-tuesday/Microsoft's final Patch Tuesday of 2025 addresses 57 vulnerabilities including three zero-days—one actively exploited in attacks.Wed, 10 Dec 2025 14:00:00 GMTSecurity