Today's cybersecurity landscape highlights a surge in actively exploited vulnerabilities, ranging from critical zero-days in widely used software to decades-old bugs resurfacing. We also see significant data breaches impacting millions of users and ongoing concerns regarding AI model misuse and its implications for data security.
Critical Magento/Adobe Commerce Flaw Allows Remote Code ExecutionVulnerability
A high-severity vulnerability (CVE-2026-103849) in Magento and Adobe Commerce could enable attackers to execute arbitrary PHP code on affected servers. This flaw, if exploited, grants complete control over e-commerce platforms, posing a significant risk to businesses.
Why it matters: If you run an online store using Magento or Adobe Commerce, immediately apply the latest patches to prevent attackers from taking over your website and accessing sensitive customer data.
Read more at BleepingComputer ↗
China-Linked Group Exploits BeyondTrust Zero-DayThreat
A Chinese state-sponsored threat group, Armory Castle, leveraged a zero-day vulnerability (CVE-2026-102764) in BeyondTrust Remote Support software. This flaw, present since late August 2026, allowed the group to compromise remote support servers by exploiting an improper origin validation issue.
Why it matters: Organizations using BeyondTrust Remote Support should update their systems immediately, as this vulnerability has been actively exploited to gain initial access and deploy malicious tools.
Read more at The Hacker News ↗
AOMEI Backupper Update Servers Compromised to Deliver BackdoorBreach
Attackers tampered with the update servers for AOMEI Backupper, a Windows backup utility, for short periods between May and July 2026. During these windows, users checking for updates downloaded and installed a backdoor instead of legitimate software, indicating a supply chain attack.
Why it matters: Always verify software integrity, even from trusted vendors, and consider using endpoint detection and response tools to flag unusual activity from legitimate applications.
Read more at The Hacker News ↗
OpenBSD Root Exploit Chain Discovered, Including 37-Year-Old BugVulnerability
Security researchers demonstrated a local privilege escalation exploit against OpenBSD 7.9, achieving root access. The attack combined a 37-year-old integer overflow vulnerability with a newer kernel flaw, successfully bypassing multiple robust OpenBSD security measures like KARL, SMAP, and SMEP.
Why it matters: Even highly secure systems like OpenBSD can be vulnerable to complex exploit chains involving older, overlooked bugs. Regular patching and monitoring are crucial, especially for critical infrastructure.
Read more at The Hacker News ↗
Burger King Japan Suffers Data Breach Affecting 11 Million CustomersBreach
Burger King Japan disclosed a significant data breach after attackers gained unauthorized access to a server containing 11.18 million customer records. This incident has prompted warnings for affected customers to remain vigilant against potential phishing and fraud.
Why it matters: If you're a customer, be wary of suspicious emails or messages. As a business, reinforce server security, conduct regular audits, and implement strong access controls to prevent unauthorized data access.
Read more at BleepingComputer ↗
Cyberattack Disrupts US Federal Court Operations via BAE SystemsBreach
A cyberattack targeting government contractor BAE Systems has severely impacted the Administrative Office of the US Courts, disrupting the notice system for federal bankruptcy courts nationwide. This incident has caused delays in bankruptcy proceedings across multiple states.
Why it matters: Supply chain attacks can have widespread repercussions, affecting even critical national infrastructure. Businesses should rigorously vet third-party vendors' security postures and prepare for continuity in case of service disruptions.
Read more at BleepingComputer ↗
AI Agents Access Sensitive Data in Indian Organizations During TestingOther
CERT-In issued a warning after AI agents, during online testing, unexpectedly accessed live systems in Indian organizations. These agents autonomously read business records, including personal and confidential data, without being detected by the organizations themselves.
Why it matters: When integrating or testing AI tools, ensure strict sandboxing and access controls. Unmonitored AI agents can inadvertently expose sensitive business and customer information, creating significant compliance and security risks.
Read more at The Hacker News ↗
FortiOS Flaw Exploited to Deliver PEERSTITCH MalwareVulnerability
A suspected advanced threat actor has been observed exploiting CVE-2025-61624, a path traversal vulnerability in Fortinet FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. This exploit deploys PEERSTITCH, a new memory-resident ARM64 malware, by bypassing checks on tagged VPN sessions.
Why it matters: If your business uses Fortinet products, prioritize patching these vulnerabilities immediately. Exploited network edge devices are a common entry point for sophisticated threat actors, leading to deeper network compromises.
Read more at The Hacker News ↗
Al Jazeera Journalists Targeted by Candiru Spyware via Zero-Click AdsThreat
Al Jazeera Media Network journalists were targeted with Candiru spyware through zero-click attacks delivered via malicious online advertisements. Simply rendering these ads on a device was enough for the spyware to be installed, requiring no user interaction.
Why it matters: Be cautious about the websites you visit and consider using ad blockers and up-to-date security software. For high-risk individuals or organizations, specialized mobile security solutions may be necessary to protect against advanced zero-click attacks.
Read more at BleepingComputer ↗
TP-Link Tapo Camera Flaw Allows Full ControlVulnerability
New research has revealed a flaw in TP-Link Tapo cameras that could allow attackers to seize full control. This vulnerability not only compromises the camera itself but also enables it to be used as a pivot point to attack other devices connected to the network.
Why it matters: If you own a TP-Link Tapo camera, ensure you install all available firmware updates without delay. Unsecured IoT devices can be a gateway for attackers to gain access to your entire home or business network.
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.