Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-22 17:00 PDT
- Rogue external MFA providers can steal passwords during logins
BleepingComputer • 2026-09-22 14:45 • www.bleepingcomputer.com
Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users’ passwords during legitimate login attempts. […]
https://www.bleepingcomputer.com/news/security/rogue-external-mfa-providers-can-steal-passwords-during-logins/ - Sweden fines Miljödata $183,000 over breach affecting 2.2 million
BleepingComputer • 2026-09-22 14:40 • www.bleepingcomputer.com
Sweden’s data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for inadequate security measures leading to a breach in August 2025 affecting 2.2 million people. […]
https://www.bleepingcomputer.com/news/security/sweden-fines-milj-data-183-000-over-breach-affecting-22-million/ - Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
BleepingComputer • 2026-09-22 13:35 • www.bleepingcomputer.com
A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases. […]
https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/ - ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
BleepingComputer • 2026-09-22 12:13 • www.bleepingcomputer.com
The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive data on employees and job applicants. […]
https://www.bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/ - The Truth about GET and HTTP Standards, (Tue, Sep 22nd)
SANS ISC Diary (full) • 2026-09-22 12:06 • isc.sans.eduOn Friday, Xavier talked about the newly introduced HTTP Query method. This new method was introduced to allow “GET” requests that include a body. The main reason for this was that GET requests typically do not contain a body. But what if they do?
- Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
The Hacker News • 2026-09-22 11:29 • thehackernews.com
Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said.The flaw, CVE-2026-93616, allows an attacker who can access the server’s web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point
https://thehackernews.com/2026/09/check-point-warns-of-management-server.html - New ClosedQuorum Windows malware uses AI for attack decisions
BleepingComputer • 2026-09-22 11:04 • www.bleepingcomputer.com
A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. […]
https://www.bleepingcomputer.com/news/security/new-closedquorum-windows-malware-uses-ai-for-attack-decisions/ - WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
The Hacker News • 2026-09-22 11:03 • thehackernews.com
WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders.On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners
https://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
