Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-26 17:00 PDT
- ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
BleepingComputer • 2026-09-26 12:03 • www.bleepingcomputer.com
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. […]
https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/ - Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Hacker News • 2026-09-26 11:22 • thehackernews.com
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex.The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users.
“The attack chain begins with a fake CAPTCHA page and
https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
