Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-26 13:00 PDT
- ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
BleepingComputer • 2026-09-26 12:03 • www.bleepingcomputer.com
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. […]
https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/ - Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Hacker News • 2026-09-26 11:22 • thehackernews.com
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex.The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users.
“The attack chain begins with a fake CAPTCHA page and
https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html - Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer
BleepingComputer • 2026-09-26 09:26 • www.bleepingcomputer.com
Anthropic’s Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5. […]
https://www.bleepingcomputer.com/news/artificial-intelligence/claude-opus-55-uses-95-percent-fewer-em-dashes-but-its-answers-are-getting-longer/ - Microsoft pauses KB5002907 update after Office license deactivations
BleepingComputer • 2026-09-26 08:50 • www.bleepingcomputer.com
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations. […]
https://www.bleepingcomputer.com/news/microsoft/microsoft-365-kb5002907-update-paused-after-office-license-deactivations/ - GitHub Actions re-enabled with Mini Shai-Hulud payload still active
BleepingComputer • 2026-09-26 07:19 • www.bleepingcomputer.com
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. […]
https://www.bleepingcomputer.com/news/security/github-actions-re-enabled-with-mini-shai-hulud-payload-still-active/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
