Today's cybersecurity landscape highlights a flurry of critical vulnerabilities and significant data breaches, emphasizing the constant need for vigilance and rapid patching. From exploited flaws in widely used software to major healthcare data compromises, the digital defense front remains active.
Actively Exploited PaperCut Flaws Demand Immediate PatchingVulnerability
Multiple security flaws in PaperCut NG and MF print management software are under active exploitation, with attackers chaining vulnerabilities to achieve unauthenticated remote code execution. PaperCut has issued emergency patches and subsequent fixes to address these critical issues, urging users to update immediately.
Why it matters: If your business uses PaperCut NG or MF, you must apply the latest emergency patches without delay to prevent attackers from gaining full control over your systems.
Read more at The Hacker News ↗
Critical Vulnerabilities in ServiceNow AI Platform UncoveredVulnerability
ServiceNow has released patches for four security vulnerabilities in its AI Platform, three of which are rated with a maximum CVSS score of 10.0. These flaws could allow unauthenticated attackers to execute code, perform SQL injection, and escalate privileges under specific conditions.
Why it matters: Businesses using ServiceNow AI Platform must ensure their instances are updated to the latest patched versions to prevent potential system compromise by unauthenticated attackers.
Read more at The Hacker News ↗
McKesson Discloses Breach After ShinyHunters Claim Patient Data TheftBreach
Healthcare and pharmaceutical distributor McKesson has confirmed a cybersecurity incident involving unauthorized access to third-party applications and data exfiltration. The ShinyHunters extortion group has claimed responsibility, alleging the theft of 284 million patient records.
Why it matters: This breach underscores the critical importance of third-party vendor security; small businesses relying on external services should vet their vendors' security practices and ensure strong data protection clauses in contracts.
Read more at BleepingComputer ↗
OwnCloud Flaw Exploited to Steal Nuclear RecordsVulnerability
A critical vulnerability in ownCloud (CVE-2023-49105, CVSS 9.8) has been added to CISA's Known Exploited Vulnerabilities catalog after reports emerged of a Chinese-speaking threat actor exploiting it. The flaw was used to target a nuclear research body in the Philippines, leading to the theft of sensitive records.
Why it matters: If your website or business uses ownCloud, verify that all instances are patched immediately, as this vulnerability is actively being exploited by sophisticated threat actors.
Read more at The Hacker News ↗
Critical cPanel Vulnerability Allows Root AccessVulnerability
cPanel has released patches for a critical security flaw, CVE-2026-65643, affecting domain parking and addon domain functionalities in cPanel and WebHost Manager (WHM). This vulnerability could allow a hosting customer to achieve root-level code execution across an entire server.
Why it matters: For any business using cPanel or WHM, updating to the latest patched version is crucial. This vulnerability poses a severe risk of one compromised user escalating to full server control.
Read more at The Hacker News ↗
Exploited Flaw in Cosmos EVM Led to Blockchain Fund DrainsVulnerability
A critical balance-handling flaw (GHSA-7g4w-cg88-2cq2) in the shared Cosmos EVM module was exploited to drain funds from six different blockchains. Cosmos Labs had prior knowledge of the vulnerability affecting every blockchain running the module before the exploits occurred.
Why it matters: Businesses involved with blockchain technologies, especially those using the Cosmos EVM module, should review their security protocols and ensure all related systems are patched and monitored for suspicious activity.
Read more at The Hacker News ↗
Hasbro Discloses Employee Data BreachBreach
Toy and game manufacturing giant Hasbro has announced a data breach affecting its employees. Attackers gained access to personal and financial information, though the exact number of impacted individuals has not yet been disclosed.
Why it matters: Even large corporations face employee data breaches; small businesses should implement robust internal security, employee training, and multi-factor authentication to protect sensitive staff data.
Read more at BleepingComputer ↗
Berlin Government Refuses Ransom After State Network BreachRansomware
The Berlin state government has publicly stated its refusal to pay an extortion demand following an August compromise of its administrative network. Forensic analysis revealed additional data outflows from a Senate Department portfolio, indicating a significant and ongoing incident.
Why it matters: Deciding whether to pay a ransom is a complex issue; for small businesses, robust backups, strong incident response plans, and proper cybersecurity insurance are crucial to mitigate the impact of such attacks.
Read more at The Hacker News ↗
WordPress GiveWP Plugin Flaw Allows Remote Code ExecutionVulnerability
A critical vulnerability in the GiveWP donation plugin for WordPress allows unauthenticated attackers to execute arbitrary commands on the hosting server. This maximum-severity flaw poses a significant risk to websites using the affected plugin.
Why it matters: If your WordPress site uses the GiveWP plugin, update it immediately to the latest patched version to prevent unauthenticated attackers from gaining control over your server.
Read more at BleepingComputer ↗
APT28 Deploys HOOKEDGE Backdoor in European AttacksThreat
The threat group APT28, linked to Russia, has been observed deploying a new backdoor named HOOKEDGE in campaigns targeting government and diplomatic organizations across Romania, Spain, and Turkey. This lightweight Windows batch script is distributed through spear-phishing tactics.
Why it matters: Be highly cautious of suspicious emails, especially those mimicking official communications, as nation-state actors continue to target organizations for espionage and disruption. Implement strong email security and user training.
Read more at The Hacker News ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.