Breaking News – Cyber Threats – 2026-09-25 03:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-09-25 03:00 PDT

• Hackers steal $351.6 million in Bitget crypto exchange hack
  BleepingComputer • 2026-09-25 01:33 • www.bleepingcomputer.com
  ​Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets. […]
  https://www.bleepingcomputer.com/news/security/hackers-steal-3516-million-in-bitget-crypto-exchange-hack/
• A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)
  SANS ISC Diary (full) • 2026-09-24 23:45 • isc.sans.edu

  Introduction

  
  https://isc.sans.edu/diary/rss/33368

• Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
  The Hacker News • 2026-09-24 21:49 • thehackernews.com
  A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday.

  The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could not choose whose data they got, according to Cloudflare. The company
  https://thehackernews.com/2026/09/cloudflare-fixes-flaw-that-let-one.html

• WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
  The Hacker News • 2026-09-24 21:46 • thehackernews.com
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

  The vulnerabilities are listed below –

  CVE-2026-5430 (CVS score: 9.8) – A path traversal vulnerability in  WSO2 API Control Plane,
  https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.