Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to take the secrets and cloud credentials that a repository’s CI workflows can reach. ItRead More »Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

A critical flaw in Apache HTTP Server’s HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which shipsRead More »Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software. “OurRead More »ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decadeRead More »Who Runs the Ransomware Group Qilin?

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems. The vulnerabilities are listed below – CVE-2026-108186 (CVSS score: 9.6) – An improper input validation vulnerability that could allow an unauthenticated userRead More »Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments. “In several recently observed intrusions, Alibaba Cloud systems hosting AntiFox interfaces were associated with confirmed maliciousRead More »AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet’s CyOps and Research teams said they identified the suspicious activity in October 2026 against several E.U.-based customers within a narrow window of just over three minutes. TheRead More »Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits