Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-05 13:00 PDT
- Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
The Hacker News • 2026-09-05 09:52 • thehackernews.com
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment.“Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence executions,” JetBrains said.
https://thehackernews.com/2026/09/attackers-breached-jetbrains-cadence.html - Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
The Hacker News • 2026-09-05 09:05 • thehackernews.com
Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.
“A
https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html - Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain
BleepingComputer • 2026-09-05 07:29 • www.bleepingcomputer.com
A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). […]
https://www.bleepingcomputer.com/news/security/over-5-400-hacked-sites-serve-clickfix-payloads-stored-on-the-blockchain/ - Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
The Hacker News • 2026-09-05 07:17 • thehackernews.com
Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk.The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021. The breach does not affect the security of the company’s hardware wallets
https://thehackernews.com/2026/09/trezor-says-shipmonk-breach-exposed.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
