Updates only https://cyber.netsecops.io/ 20 Recently updated articles en-us Fri, 04 Sep 2026 16:34:53 GMT [UPDATED] CISA: Over 100 U.S. Water Systems Targeted in July Cyber Campaign https://cyber.netsecops.io/articles/over-100-us-water-systems-targeted-in-widespread-cyber-campaign/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/over-100-us-water-systems-targeted-in-widespread-cyber-campaign/ Sun, 30 Aug 2026 00:00:00 GMT The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that a widespread cyber campaign in July 2026 targeted over 100 systems in the U.S. Water and Wastewater Systems (WWS) sector. The attacks, widely attributed to Iranian state-aligned actors, exploited internet-exposed indu...

Severity: Critical

Categories: Industrial Control Systems, Cyberattack, Threat Actor

Read Full Article →

]]> Industrial Control Systems Cyberattack Threat Actor [UPDATED] CISA Adds Seven Actively Exploited Flaws to KEV Catalog https://cyber.netsecops.io/articles/cisa-adds-seven-actively-exploited-vulnerabilities-to-kev-catalog/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/cisa-adds-seven-actively-exploited-vulnerabilities-to-kev-catalog/ Thu, 03 Sep 2026 00:00:00 GMT The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list includes critical flaws in SonicWall, Kestra, and JFrog products. This action falls under the new Bi...

Severity: Critical

Categories: Vulnerability, Patch Management, Threat Intelligence

Read Full Article →

]]> Vulnerability Patch Management Threat Intelligence [UPDATED] SonicWall Patches Two Actively Exploited SMA 1000 Zero-Days https://cyber.netsecops.io/articles/sonicwall-urges-patching-for-two-actively-exploited-zero-day-vulnerabilities/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/sonicwall-urges-patching-for-two-actively-exploited-zero-day-vulnerabilities/ Thu, 03 Sep 2026 00:00:00 GMT SonicWall has released urgent security patches for two zero-day vulnerabilities in its SMA 1000 series appliances. The flaws, a critical-rated server-side request forgery (SSRF) and a high-severity command injection, are being actively chained by attackers to achieve unauthenticated remote code exec...

Severity: Critical

Categories: Vulnerability, Cyberattack, Patch Management

Read Full Article →

]]> Vulnerability Cyberattack Patch Management [UPDATED] PaperCut Zero-Day RCE Actively Exploited; Emergency Patches Released https://cyber.netsecops.io/articles/papercut-warns-of-actively-exploited-zero-day-rce-vulnerability/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/papercut-warns-of-actively-exploited-zero-day-rce-vulnerability/ Sat, 29 Aug 2026 00:00:00 GMT Print management software provider PaperCut has issued an urgent security warning about a vulnerability chain being actively exploited in the wild. The flaws, affecting all versions of PaperCut NG and MF, can be chained to achieve pre-authentication remote code execution (RCE). The attack combines a...

Severity: Critical

Categories: Vulnerability, Patch Management, Cyberattack

Read Full Article →

]]> Vulnerability Patch Management Cyberattack [UPDATED] SonicWall Warns of Two Actively Exploited Zero-Days in SMA1000 https://cyber.netsecops.io/articles/sonicwall-sma1000-zero-day-vulnerabilities-actively-exploited/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/sonicwall-sma1000-zero-day-vulnerabilities-actively-exploited/ Wed, 02 Sep 2026 00:00:00 GMT SonicWall has issued urgent patches for two zero-day vulnerabilities, CVE-2026-83548 and CVE-2026-83549, affecting its SMA 1000 series appliances. The flaws, a critical server-side request forgery (SSRF) and a command injection, are being actively chained by threat actors to achieve unauthenticated ...

Severity: Critical

Categories: Vulnerability, Cyberattack, Patch Management

Read Full Article →

]]> Vulnerability Cyberattack Patch Management [UPDATED] Google Patches Two Critical Use-After-Free Flaws in Chrome https://cyber.netsecops.io/articles/google-patches-critical-use-after-free-vulnerabilities-in-chrome/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/google-patches-critical-use-after-free-vulnerabilities-in-chrome/ Wed, 02 Sep 2026 00:00:00 GMT Google has released a security update for its Chrome browser, version 152.0.7977.75 for Windows/Mac and 152.0.7977.76 for Linux, addressing 26 vulnerabilities. The patch includes fixes for two critical use-after-free flaws, CVE-2026-84353 in Shared Tab Groups and CVE-2026-84352 in WebGL. These vulne...

Severity: High

Categories: Vulnerability, Patch Management

Read Full Article →

]]> Vulnerability Patch Management [UPDATED] EU Cyber Resilience Act's 24-Hour Reporting Mandate Starts Sept 11 https://cyber.netsecops.io/articles/eu-cyber-resilience-act-mandatory-reporting-deadline-approaches/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/eu-cyber-resilience-act-mandatory-reporting-deadline-approaches/ Tue, 01 Sep 2026 00:00:00 GMT Manufacturers of connected products sold in the EU must comply with the Cyber Resilience Act's (CRA) new reporting obligations starting September 11, 2026. The rules mandate reporting actively exploited vulnerabilities and severe incidents affecting their products to ENISA within 24 hours.

Severity: Informational

Categories: Policy and Compliance, Regulatory

Read Full Article →

]]> Policy and Compliance Regulatory [UPDATED] Suspected Iranian Actors Target U.S. Water Utilities via Exposed PLCs https://cyber.netsecops.io/articles/coordinated-cyberattacks-hit-us-water-utilities-suspected-iranian-link/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/coordinated-cyberattacks-hit-us-water-utilities-suspected-iranian-link/ Tue, 04 Aug 2026 00:00:00 GMT A coordinated series of cyberattacks has targeted water and wastewater facilities across at least seven U.S. states, with suspected links to Iranian state-sponsored actors. The attackers exploited internet-exposed Programmable Logic Controllers (PLCs), primarily from Rockwell Automation, to disrupt ...

Severity: High

Categories: Industrial Control Systems, Cyberattack, Threat Actor

Read Full Article →

]]> Industrial Control Systems Cyberattack Threat Actor [UPDATED] Google Chrome 152 Patches 327 Flaws, Including 10 Critical Bugs https://cyber.netsecops.io/articles/google-chrome-152-patches-327-vulnerabilities-10-critical/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/google-chrome-152-patches-327-vulnerabilities-10-critical/ Wed, 26 Aug 2026 00:00:00 GMT Google has released Chrome 152 for Windows, macOS, and Linux, a major security update that addresses 327 vulnerabilities. The patch includes fixes for 10 critical flaws, the majority of which are use-after-free memory corruption issues in components like ANGLE, Aura, and Chromecast that could lead t...

Severity: High

Categories: Patch Management, Vulnerability

Read Full Article →

]]> Patch Management Vulnerability [UPDATED] Critical JFrog Artifactory Auth Bypass Flaw Under Active Exploit https://cyber.netsecops.io/articles/critical-jfrog-artifactory-flaw-under-active-exploitation/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/critical-jfrog-artifactory-flaw-under-active-exploitation/ Tue, 01 Sep 2026 00:00:00 GMT A critical authentication bypass vulnerability, CVE-2026-82329, in self-hosted JFrog Artifactory instances is being actively exploited. The flaw allows unauthenticated attackers to gain administrative privileges. Patches were released on August 28, 2026, and organizations are urged to update immedia...

Severity: Critical

Categories: Vulnerability, Supply Chain Attack, Patch Management

Read Full Article →

]]> Vulnerability Supply Chain Attack Patch Management [UPDATED] AI Research Firm METR Discloses $600k API Key Theft https://cyber.netsecops.io/articles/ai-research-firm-metr-discloses-api-key-theft-and-cyberattacks/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/ai-research-firm-metr-discloses-api-key-theft-and-cyberattacks/ Tue, 01 Sep 2026 00:00:00 GMT AI safety non-profit METR disclosed two security incidents. In March 2026, a stolen API key was used to fraudulently consume approximately $600,000 in AI credits. In May, a separate, sustained campaign involved automated probing of its public infrastructure, credential stuffing, and phishing.

Severity: High

Categories: Cyberattack, Cloud Security, Data Breach

Read Full Article →

]]> Cyberattack Cloud Security Data Breach [UPDATED] Attackers Hijack AI API Keys to Fuel Gray Market "Transfer Stations" https://cyber.netsecops.io/articles/token-jacking-cybercriminals-stealing-ai-resources/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/token-jacking-cybercriminals-stealing-ai-resources/ Thu, 06 Aug 2026 00:00:00 GMT A new threat dubbed "token jacking" has emerged where attackers steal AI API keys from developers to power illicit "transfer stations." These gray market services resell access to premium AI models at a fraction of the cost, often fueled by stolen credentials. Attackers are using methods like inform...

Severity: High

Categories: Cloud Security, Threat Intelligence, Supply Chain Attack

Read Full Article →

]]> Cloud Security Threat Intelligence Supply Chain Attack [UPDATED] Threat Actors Use AI Scripts to Target Siemens PLCs in Critical Infrastructure https://cyber.netsecops.io/articles/threat-actors-use-ai-scripts-to-target-siemens-plcs-in-us-critical-infrastructure/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/threat-actors-use-ai-scripts-to-target-siemens-plcs-in-us-critical-infrastructure/ Fri, 28 Aug 2026 00:00:00 GMT A joint advisory from U.S. agencies like the NSA and CISA warns of an ongoing campaign where threat actors are using AI-generated scripts to target Siemens S7 Series Programmable Logic Controllers (PLCs) in U.S. critical infrastructure. The attackers are using scanning tools to find exposed PLCs and...

Severity: High

Categories: Industrial Control Systems, Cyberattack, Threat Intelligence

Read Full Article →

]]> Industrial Control Systems Cyberattack Threat Intelligence [UPDATED] McKesson Discloses Breach After ShinyHunters Claims Patient Data Theft https://cyber.netsecops.io/articles/mckesson-discloses-breach-shinyhunters-claims-patient-data-theft/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/mckesson-discloses-breach-shinyhunters-claims-patient-data-theft/ Sat, 29 Aug 2026 00:00:00 GMT U.S. healthcare giant McKesson has confirmed a cybersecurity incident involving unauthorized network access and data exfiltration. The ShinyHunters extortion group has claimed responsibility, alleging the theft of approximately one terabyte of data, including 284 million patient-related records, fro...

Severity: High

Categories: Data Breach, Threat Actor, Cloud Security

Read Full Article →

]]> Data Breach Threat Actor Cloud Security [UPDATED] Boston Scientific Operations Crippled by Major Global Cyberattack https://cyber.netsecops.io/articles/boston-scientific-operations-crippled-by-major-cyberattack/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/boston-scientific-operations-crippled-by-major-cyberattack/ Sun, 30 Aug 2026 00:00:00 GMT Medical technology giant Boston Scientific is grappling with a significant cyberattack that triggered a global network outage, severely disrupting its manufacturing, order processing, and shipping capabilities. The incident, first identified on August 25, 2026, has led to a multi-day operational sta...

Severity: High

Categories: Cyberattack, Industrial Control Systems, Threat Intelligence

Read Full Article →

]]> Cyberattack Industrial Control Systems Threat Intelligence [UPDATED] ATF Confirms Major Incident After Qilin Ransomware Breach Claim https://cyber.netsecops.io/articles/atf-confirms-major-incident-after-qilin-ransomware-breach-claim/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/atf-confirms-major-incident-after-qilin-ransomware-breach-claim/ Thu, 27 Aug 2026 00:00:00 GMT The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a 'major' cybersecurity incident following a claim by the Qilin ransomware gang. On August 26, 2026, Qilin listed the federal agency on its dark web leak site. The ATF stated the breach was contained to a 'standalone co...

Severity: High

Categories: Ransomware, Data Breach, Threat Actor

Read Full Article →

]]> Ransomware Data Breach Threat Actor [UPDATED] Manchester Airports Group Breach Exposes 8.7 Million Customers' Data https://cyber.netsecops.io/articles/manchester-airports-group-breach-exposes-data-of-8-7-million-customers/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/manchester-airports-group-breach-exposes-data-of-8-7-million-customers/ Sat, 29 Aug 2026 00:00:00 GMT Manchester Airports Group (MAG), operator of Manchester, Stansted, and East Midlands airports in the UK, has suffered a data breach affecting approximately 8.7 million customers. An unauthorized third party accessed a system containing customer information related to bookings for services like car p...

Severity: High

Categories: Data Breach, Cyberattack

Read Full Article →

]]> Data Breach Cyberattack [UPDATED] Unpatched "ShieldBreak" Zero-Day Hits Microsoft Defender (CVE-2026-69414) https://cyber.netsecops.io/articles/shieldbreak-unpatched-zero-day-microsoft-defender-lpe-cve-2026-69414/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/shieldbreak-unpatched-zero-day-microsoft-defender-lpe-cve-2026-69414/ Wed, 26 Aug 2026 00:00:00 GMT A new unpatched zero-day vulnerability named "ShieldBreak" (CVE-2026-69414) affects the Microsoft Malware Protection Engine in Microsoft Defender. The flaw allows a local, low-privilege attacker to escalate their privileges to SYSTEM. A proof-of-concept exploit is publicly available, and Microsoft h...

Severity: High

Categories: Vulnerability, Patch Management, Malware

Read Full Article →

]]> Vulnerability Patch Management Malware [UPDATED] Boston Scientific Suffers Global Disruption from Major Cyberattack https://cyber.netsecops.io/articles/boston-scientific-cyberattack-disrupts-global-operations/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/boston-scientific-cyberattack-disrupts-global-operations/ Thu, 27 Aug 2026 00:00:00 GMT Medical device manufacturer Boston Scientific has been hit by a significant cyberattack, resulting in a global network outage and severe disruption to its business operations. The incident, detected on August 25, 2026, has impacted the company's ability to process and ship customer orders worldwide....

Severity: High

Categories: Cyberattack, Data Breach, Threat Intelligence

Read Full Article →

]]> Cyberattack Data Breach Threat Intelligence [UPDATED] US Seizes Chinese Hacking Platforms Targeting Critical Infrastructure https://cyber.netsecops.io/articles/us-seizes-chinese-hacking-platforms-qscan-qtrouter-targeting-critical-infrastructure/?utm_source=rss&utm_medium=feed&utm_campaign=updates https://cyber.netsecops.io/articles/us-seizes-chinese-hacking-platforms-qscan-qtrouter-targeting-critical-infrastructure/ Thu, 27 Aug 2026 00:00:00 GMT The U.S. Department of Justice and FBI have seized domains used by a Chinese state-sponsored hacking group known as 'QTFY' to operate two malicious platforms: 'QScan' and 'QTRouter'. These tools were part of a multi-year campaign targeting U.S. critical infrastructure, including NASA, the Federal Re...

Severity: High

Categories: Threat Actor, Cyberattack, Policy and Compliance

Read Full Article →

]]> Threat Actor Cyberattack Policy and Compliance