Content is curated from many trusted industry sources, including vendor advisories, security blogs, bug bounty programs, and conference organizers worldwide.
Security researcher Patrick Wardle demonstrated a proof-of-concept showing malware already present on macOS can seize control of Meta's Muse assistant by abusing the app's broad permissions. The attack toggles a hidden setting so that spoken prompts captured from the microphone are routed to the attacker instead of Meta, compromising user privacy. The flaw is in
A WordPress core flaw allowed an anonymous commenter to plant a hidden script on a page; when a logged-in administrator later opened that page, the script could execute code on the server. The issue, CVE-2026-93485 dubbed "Comment2Shell," was fixed in WordPress 7.1.1 on Sept. 17, with a patch and urgent update guidance for site owners. Update now.
Guwahati’s Joint Cyber Coordination Team has become a pivotal cybercrime control hub after recent operations, tracing suspected fraud proceeds across India and exposing financial networks extending beyond Assam. Operating under the Indian Cyber Crime Coordination Centre, it coordinates nationwide investigations for enhanced cybercrime response.
North Korean actor Jade Sleet has been linked to the compromise of an India-based IT services provider, where attackers deployed two macOS backdoors, FLATROOF and ROOFDECK. The campaign targeted developers, utilizing social engineering and compromised development infrastructure to gain access and establish persistence across victim systems.
The US CISA warns hackers are actively exploiting three Linux kernel vulnerabilities, including a critical flaw. Federal agencies must prioritize fixes, patch affected systems, and monitor for signs of exploitation. The advisory notes separate disclosures and urges rapid assessment to contain threat and reduce risk. Agencies share IOCs.
BigCommerce disclosed that attackers compromised credentials for third-party apps, enabling malicious script injections into stores and possible exposure of customer data. The cloud platform confirmed the breach on Sept 17 and promptly removed the affected apps to protect users, underscoring supply-chain risks from linked integrations. It matters.
CISA added a now-patched vulnerability affecting Zyxel GS1900 switches to its KEV catalog, citing evidence of active exploitation. Tracked as CVE-2026-7273 (CVSS 8.8), it is a stack-based buffer overflow that could enable arbitrary code execution, threatening device integrity, confidentiality, and availability.
DoT warns mobile users not to lend or share SIMs issued in their name, outlining legal risks from fraudulent SIM issuance, misuse of telecom identifiers, and tampering with IMEI. Subscribers should regularly review numbers registered to their identity and report suspicious or unauthorized connections to prevent abuse.
Delhi Police traced a money trail from a cyber fraud case to a senior citizen in Janakpuri who had allegedly transferred about ₹60 lakh to scammers. Investigators found she remained under pressure from fraudsters posing as law enforcement officials; the case underscores digital arrest fraud targeting the elderly. Authorities warn against responding to such calls and verify through official channels.
A man used fake female profiles on matrimonial sites, posing as Aishwarya with a woman's photos and a female voice to lure men seeking marriage. He claimed Aishwarya was undergoing IRS training to deflect scrutiny, duping victims. Police are investigating his motives and methods. The case highlights online impersonation risks and fraud in dating networks. End.
Cybercriminals siphoned ₹3,22,408 from Dr. Girish Kumar Singh, AIIMS Patna’s founding director and senior orthopaedic specialist, through unauthorized withdrawals over more than two months. The 72-year-old physician, now with the Prasad Institute of Medical Sciences, faces ongoing fraud losses and investigations.
Paybis provides crypto on-ramp and off-ramp services with card payments, bank transfers, and wallet transfers. This overview explains fees, verification steps, security measures, and regional availability to help users assess costs, eligibility, and compliance before buying or selling crypto. It notes regional fee variation and verification needs.
Security researcher Patrick Wardle demonstrated a proof-of-concept showing malware already present on macOS can seize control of Meta's Muse assistant by abusing the app's broad permissions. The attack toggles a hidden setting so that spoken prompts captured from the microphone are routed to the attacker instead of Meta, compromising user privacy. The flaw is in
A WordPress core flaw allowed an anonymous commenter to plant a hidden script on a page; when a logged-in administrator later opened that page, the script could execute code on the server. The issue, CVE-2026-93485 dubbed "Comment2Shell," was fixed in WordPress 7.1.1 on Sept. 17, with a patch and urgent update guidance for site owners. Update now.
Guwahati’s Joint Cyber Coordination Team has become a pivotal cybercrime control hub after recent operations, tracing suspected fraud proceeds across India and exposing financial networks extending beyond Assam. Operating under the Indian Cyber Crime Coordination Centre, it coordinates nationwide investigations for enhanced cybercrime response.
North Korean actor Jade Sleet has been linked to the compromise of an India-based IT services provider, where attackers deployed two macOS backdoors, FLATROOF and ROOFDECK. The campaign targeted developers, utilizing social engineering and compromised development infrastructure to gain access and establish persistence across victim systems.
The US CISA warns hackers are actively exploiting three Linux kernel vulnerabilities, including a critical flaw. Federal agencies must prioritize fixes, patch affected systems, and monitor for signs of exploitation. The advisory notes separate disclosures and urges rapid assessment to contain threat and reduce risk. Agencies share IOCs.
BigCommerce disclosed that attackers compromised credentials for third-party apps, enabling malicious script injections into stores and possible exposure of customer data. The cloud platform confirmed the breach on Sept 17 and promptly removed the affected apps to protect users, underscoring supply-chain risks from linked integrations. It matters.
CISA added a now-patched vulnerability affecting Zyxel GS1900 switches to its KEV catalog, citing evidence of active exploitation. Tracked as CVE-2026-7273 (CVSS 8.8), it is a stack-based buffer overflow that could enable arbitrary code execution, threatening device integrity, confidentiality, and availability.
DoT warns mobile users not to lend or share SIMs issued in their name, outlining legal risks from fraudulent SIM issuance, misuse of telecom identifiers, and tampering with IMEI. Subscribers should regularly review numbers registered to their identity and report suspicious or unauthorized connections to prevent abuse.
Delhi Police traced a money trail from a cyber fraud case to a senior citizen in Janakpuri who had allegedly transferred about ₹60 lakh to scammers. Investigators found she remained under pressure from fraudsters posing as law enforcement officials; the case underscores digital arrest fraud targeting the elderly. Authorities warn against responding to such calls and verify through official channels.
A man used fake female profiles on matrimonial sites, posing as Aishwarya with a woman's photos and a female voice to lure men seeking marriage. He claimed Aishwarya was undergoing IRS training to deflect scrutiny, duping victims. Police are investigating his motives and methods. The case highlights online impersonation risks and fraud in dating networks. End.
Cybercriminals siphoned ₹3,22,408 from Dr. Girish Kumar Singh, AIIMS Patna’s founding director and senior orthopaedic specialist, through unauthorized withdrawals over more than two months. The 72-year-old physician, now with the Prasad Institute of Medical Sciences, faces ongoing fraud losses and investigations.
Paybis provides crypto on-ramp and off-ramp services with card payments, bank transfers, and wallet transfers. This overview explains fees, verification steps, security measures, and regional availability to help users assess costs, eligibility, and compliance before buying or selling crypto. It notes regional fee variation and verification needs.
Unlimited intelligence feeds and real-time alerts in the Secwiser app.
Download now