← All reports
Security
Database
Cloud
Vulnerabilities
Archive
BleepingComputer Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions Fri, 25 Sep 2026 12:00:00 -0400 OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex Fri, 25 Sep 2026 10:54:33 -0400 With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance Fri, 25 Sep 2026 10:51:10 -0400 Microsoft plans to deprecate Windows Deployment Services Fri, 25 Sep 2026 08:40:59 -0400 Rydox marketplace admin pleads guilty, faces 22 years in prison Fri, 25 Sep 2026 07:35:14 -0400 Microsoft: Recent Windows updates cause desktop loading issues Fri, 25 Sep 2026 06:30:38 -0400 Hackers steal $351.6 million in Bitget crypto exchange hack Fri, 25 Sep 2026 04:33:44 -0400 MacSync malware uses public iCloud calendars to deliver new payloads Thu, 24 Sep 2026 16:53:35 -0400 New Carbonato malware uses AI agents to hijack exposed Docker hosts Thu, 24 Sep 2026 16:10:48 -0400 Exposed GitLab project email addresses let attackers push code Thu, 24 Sep 2026 13:47:44 -0400 FedRAMP VDR & VER: Daily Scans Are Only the Beginning Thu, 24 Sep 2026 10:02:12 -0400 Hackers now exploit critical Roundcube flaw in code injection attacks Thu, 24 Sep 2026 09:27:57 -0400 Windows 11 KB5124010 update released with 46 changes and fixes Thu, 24 Sep 2026 08:16:32 -0400 CISA: Ransomware gangs now exploiting critical TeamCity flaw Thu, 24 Sep 2026 06:42:37 -0400 OpenAI hacked Australian Medicare govt site, probed data providers Thu, 24 Sep 2026 05:38:53 -0400 Dark Reading Stopping IT Worker Scams Requires Revamped HR Process Fri, 25 Sep 2026 14:46:13 GMT Russia's Hybrid Cyber-Physical War in Europe Heats Up Fri, 25 Sep 2026 07:00:00 GMT 'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing Thu, 24 Sep 2026 21:04:03 GMT SectopRAT Returns, Hiding Inside a Legitimate Application Thu, 24 Sep 2026 20:32:50 GMT 3 Cyber Threats That Defined the Summer of 2026 Thu, 24 Sep 2026 14:44:12 GMT How to Build a SASE Framework for Modern Cybersecurity Thu, 24 Sep 2026 14:02:43 GMT Ghost Service Accounts Enable M365 Data Theft in Chile Thu, 24 Sep 2026 13:30:00 GMT Prompt-Injection Bug Hits $4B Agentic AI App 'Manus' Thu, 24 Sep 2026 13:00:00 GMT SASE Converges Network & Security Into One Cloud Solution Wed, 23 Sep 2026 22:29:10 GMT EDR Evasion Stack Helps Process Injection Slip Past Defenses Wed, 23 Sep 2026 21:03:01 GMT GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks Wed, 23 Sep 2026 20:53:38 GMT [Virtual Event] Cybersecurity Outlook 2027 SecurityWeek In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure Fri, 25 Sep 2026 15:07:31 +0000 North Korea Suspected in $351 Million Bitget Crypto Heist Fri, 25 Sep 2026 14:16:18 +0000 CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks Fri, 25 Sep 2026 12:39:12 +0000 Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court Fri, 25 Sep 2026 12:16:27 +0000 Windows, Linux, Android File Notification Systems Leak User Activity Fri, 25 Sep 2026 10:53:32 +0000 ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration Fri, 25 Sep 2026 09:27:51 +0000 Roundcube Webmail Vulnerability in Attackers’ Crosshairs Fri, 25 Sep 2026 06:57:40 +0000 Autonomous AI Hacks Raise Thorny Questions of Legal Accountability Thu, 24 Sep 2026 20:35:21 +0000 Kontext Security Emerges With $4 Million for AI Agent Runtime Controls Thu, 24 Sep 2026 15:52:00 +0000 OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data Thu, 24 Sep 2026 14:43:13 +0000 The Hacker News Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware Fri, 25 Sep 2026 20:14:41 +0530 PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence Fri, 25 Sep 2026 18:48:06 +0530 The SOC Doesn't Need to Start Over with Every Alert Fri, 25 Sep 2026 17:00:00 +0530 Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise Fri, 25 Sep 2026 16:05:55 +0530 Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild Fri, 25 Sep 2026 15:44:02 +0530 Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data Fri, 25 Sep 2026 10:19:22 +0530 WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV Fri, 25 Sep 2026 10:16:34 +0530 Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions Thu, 24 Sep 2026 23:40:18 +0530 ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories Thu, 24 Sep 2026 23:22:43 +0530 Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content Thu, 24 Sep 2026 20:57:32 +0530 Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer Thu, 24 Sep 2026 19:59:06 +0530 Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls Thu, 24 Sep 2026 17:35:27 +0530 Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore Thu, 24 Sep 2026 16:30:00 +0530 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360 Thu, 24 Sep 2026 14:44:21 +0530 OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files Thu, 24 Sep 2026 12:37:25 +0530 The Register Office 2016 and 2019 holdouts blame update for license deactivation bug Fri, 25 Sep 2026 16:01:00 +0100 Which copy of that file is the real one? Dinner, off the record, in Midtown Fri, 25 Sep 2026 16:00:00 +0100 Raspberry Pi surfs memory crunch to record first half Fri, 25 Sep 2026 15:15:00 +0100 Windows update leaves some virtual desktops staring into the void Fri, 25 Sep 2026 14:32:00 +0100 Uncle Sam wants in on Musk's €120M fight with Brussels Fri, 25 Sep 2026 13:46:00 +0100 Asahi fork embraces LLMs and lands Linux on the M4 Mac mini Fri, 25 Sep 2026 13:00:00 +0100 Amazon sellers watch as inventory vanishes into pending-order purgatory Fri, 25 Sep 2026 12:13:00 +0100 BOFH: The Helldesk opens its third eye and ascends to a higher plane of troubleshooting Fri, 25 Sep 2026 12:09:00 +0100 Dyfed-Powys Police cops to cyberattack, staff data potentially nicked Fri, 25 Sep 2026 11:45:42 +0100 Another week, another data breach for Revolut customers Fri, 25 Sep 2026 11:04:35 +0100 Judge uses electronic tag on Pokémon card tracker. It's super effective! Fri, 25 Sep 2026 10:15:00 +0100 Your files are in four places and nobody knows which one is right Fri, 25 Sep 2026 09:45:00 +0100 UK wants more homes heated by waste heat from datacenters Fri, 25 Sep 2026 09:30:00 +0100 Huawei Cloud Rolls Out Enterprise AI Products Across the Board, Building an Open Agentic Cloud Fri, 25 Sep 2026 09:00:00 +0100 Project leader thought his team understood the plan, ended up fixing their 'interpretation' of it Fri, 25 Sep 2026 07:37:00 +0100 DBTA (Database Trends & Applications) Google Cloud AlloyDB Delivers PostgreSQL for Agents Fri, 25 Sep 2026 10:00:00 EST Datadobi Provides Data Access Governance to StorageMAP Fri, 25 Sep 2026 10:00:00 EST Perforce Delphix Showcases AI-Native Synthetic Data Solution that Maintains Consistent Control Over Sensitive Data Thu, 24 Sep 2026 10:15:00 EST UiPath Releases UiPath Cartographer to Streamline Process Knowledge into Actionable Insights Thu, 24 Sep 2026 10:15:00 EST Teradata Tera Evolves into an Agentic Coworker Designed Specifically for Enterprise Data Work Thu, 24 Sep 2026 10:15:00 EST Percona Provides Support for CloudNativePG to Deliver More Choices for PostgreSQL on Kubernetes Thu, 24 Sep 2026 09:00:00 EST Ensuring High Availability for Resilient Cloud Databases with MariaDB Thu, 24 Sep 2026 09:00:00 EST Cloudbrink Asserts ?Write Once, Protect Anywhere? Policy for Users, Devices, and Machines Thu, 24 Sep 2026 09:00:00 EST Catalyst by Zoho Provides an Agent-Ready, Full-Stack Cloud and Built-In Governance Thu, 24 Sep 2026 09:00:00 EST Google Cloud Blog Unlock 3x QPS and microsecond latency with Memorystore for Valkey 9.1 Fri, 25 Sep 2026 16:00:00 +0000 Best practices guide for customizing Gemini models via Reinforcement Learning (RL) Fri, 25 Sep 2026 16:00:00 +0000 Storage Intelligence advisor: Know what changed in your storage estate and act on it Fri, 25 Sep 2026 16:00:00 +0000 What’s new with Google Cloud Fri, 25 Sep 2026 16:00:00 +0000 Agent Factory recap: Agent harnesses, shifting left, and autonomous coding Thu, 24 Sep 2026 23:00:00 +0000 Google is a Leader in the 2026 Gartner Magic Quadrant for Container Management Thu, 24 Sep 2026 19:00:00 +0000 Introducing GKE agentic migration for AI-assisted EKS-to-GKE migrations with built-in governance Thu, 24 Sep 2026 16:00:00 +0000 Scribd, Inc. classifies more than 400 million documents with Gemini batch inference on Gemini Enterprise Thu, 24 Sep 2026 16:00:00 +0000 Power your agents: Gemini 3.8 Live with Live Avatar is now generally available Thu, 24 Sep 2026 15:00:00 +0000 How growing Latin American midsize businesses are building in the AI era Thu, 24 Sep 2026 14:30:00 +0000 AlloyDB delivers PostgreSQL for agents: Real-time data at agent scale, with full workload isolation Thu, 24 Sep 2026 14:30:00 +0000 A new, no-compromises database architecture for the agentic era Thu, 24 Sep 2026 14:30:00 +0000 Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure Thu, 24 Sep 2026 14:00:00 +0000 The three things today's hottest startups are looking for in their AI stack Thu, 24 Sep 2026 13:00:00 +0000 How Google Cloud Networking Supports Your Fluid Compute Choices for AI Workloads Thu, 24 Sep 2026 13:00:00 +0000 The New Stack OpenAI and Cursor agree on agent coordinators. They disagree on who runs them. Fri, 25 Sep 2026 12:00:00 +0000 OpenAI’s agent had a routine task. It breached a government portal. Thu, 24 Sep 2026 19:16:28 +0000 How a forgotten node can put Oracle Java back in production Thu, 24 Sep 2026 17:50:35 +0000 Developers and platform teams both want Kubernetes self-service. They disagree on who owns it. Thu, 24 Sep 2026 16:06:27 +0000 Google’s Gemini CLI now asks before editing your build files Thu, 24 Sep 2026 14:27:27 +0000 OpenAI makes you call sales for a custom voice. Google just made it self-serve. Thu, 24 Sep 2026 13:20:11 +0000 What managing 150,000 AI agents could look like for database teams Thu, 24 Sep 2026 13:11:55 +0000 Query decomposition doesn’t fix context starvation — it just moves it Thu, 24 Sep 2026 13:00:00 +0000 Cursor acquired Firetiger. A month later, it launched a bot that tracks code changes from PR to production. Thu, 24 Sep 2026 12:56:28 +0000 Can enterprises protect data without making AI less reliable? Thu, 24 Sep 2026 12:00:00 +0000 Q.ANT gives away the software for its light-powered AI chips in a CUDA-style bet on developers Wed, 23 Sep 2026 22:23:45 +0000 “Impressive level of openness”: Xiaomi goes way beyond the usual open-weight playbook with MiMo-V2.6 Wed, 23 Sep 2026 20:00:12 +0000 A third option is emerging in the fight over AI and your data Wed, 23 Sep 2026 19:31:42 +0000 Jensen Huang says the junior developer problem ends in two years. Here’s his math. Wed, 23 Sep 2026 16:55:30 +0000 Scoped Vulnerability Tracking
Database
The most urgent vulnerability is CVE-2026-58491 in Warpgate, a Critical-level SSRF flaw that enables remote code execution and data exfiltration through SSO endpoints, making it a top priority despite being slightly less publicized than some high-CVSS issues. This flaw allows attackers to hijack authenticated sessions and execute arbitrary commands on the bastion host, posing an immediate risk to database environments that integrate with Warpgate.
Formal Vulnerabilities
MySQL
[MySQL] — CVE-2026-58491 (CVSS 9.3) (CRITICAL) 🔴 ACTIVELY EXPLOITED (CISA KEV)
Summary: Warpgate’s SSO endpoint contains an SSRF vulnerability where an attacker can manipulate the `/@warpgate/api/sso/return` path to trigger arbitrary code execution or data exfiltration via open redirects and unescaped parameters.
Affected Features / Interoperability: The Warpgate bastion host SSO flow (`/@warpgate/api/sso/*`) and HTTP API endpoints are directly impacted, allowing attackers to reach internal services and execute commands remotely.
Source: https://github.com/warp-tech/warpgate/commit/eab0548f018d95b5f96f8e913527000e05ed93a2, https://github.com/warp-tech/warpgate/releases/tag/v0.25.5, https://github.com/warp-tech/warpgate/security/advisories/GHSA-3c3w-75j2-7h74
Actions:
Fix: Upgrade to version 0.25.5 or later.Workaround: Disable SSO functionality or restrict SSO access to trusted domains only.Tradeoff: Removing SSO
User Safety: safe