Today's cybersecurity round-up highlights active exploitation of a server vulnerability in UnrealIRCd and a significant supply chain breach impacting Cursor. Additionally, a major North Korean crypto theft operation has been disrupted, and the FAA outage was confirmed not to be a cyberattack.
UnrealIRCd Server Flaw Actively Exploited for Command InjectionVulnerability
A high-severity security flaw in UnrealIRCd, an open-source Internet Relay Chat (IRC) server, has been added to CISA's Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-114713, this vulnerability allows for server-level command injection due to improper handling of delimiters and is currently being actively exploited by attackers.
Why it matters: If your organization uses UnrealIRCd, it is critical to patch immediately to prevent remote code execution and potential server compromise.
Read more at The Hacker News ↗
Cursor Suffers Breach Leading to Malicious Claude Code ExtensionBreach
Cursor has confirmed a security breach that enabled threat actors to distribute a malicious Claude Code extension through its marketplace. The attackers gained access by stealing credentials from Fireworks AI, a third-party AI infrastructure provider, highlighting the risks associated with supply chain compromises.
Why it matters: Relying on third-party services introduces supply chain risks; ensure robust security practices and monitor extensions or tools integrated into your development environments.
Read more at BleepingComputer ↗
U.S. Disrupts North Korean 'FaceStealer' Crypto Theft CampaignThreat
The U.S. government has successfully disrupted a sophisticated social engineering campaign orchestrated by North Korean actors, dubbed 'FaceStealer'. This operation was responsible for the theft of over $400 million in various cryptocurrencies, demonstrating the nation-state's continued efforts in illicit financial activities.
Why it matters: Be vigilant against social engineering tactics, especially those targeting cryptocurrency holdings, as state-sponsored actors are increasingly sophisticated in their financial cybercrime operations.
Read more at BleepingComputer ↗
FAA Outage Not a Cyberattack, Software Update SuspectedOther
Officials have concluded there is no evidence of a cyberattack behind the recent nationwide FAA ground stop. Reports indicate that a software update is likely the cause of the disruption, with the FBI reportedly investigating this aspect.
Why it matters: While not a cyberattack, this incident highlights that even non-malicious software issues can cause widespread operational disruptions, underscoring the importance of rigorous testing for all system changes.
The Impact of AI on Cybersecurity SkillsOther
There are growing concerns that an over-reliance on artificial intelligence in cybersecurity might diminish essential human skills. Experts suggest that skills like critical thinking, problem-solving, and clear communication could erode, which are vital when facing unprecedented security challenges.
Why it matters: While AI can augment security, maintaining and developing human expertise in threat analysis and response remains crucial for small businesses to adapt to novel attack vectors.
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.