Skip to content
September 2026 Page 14

September 2026

Bitget Says Suspected North Korean Hackers Stole 1.6M After Backend Compromise

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise

Ravie LakshmananSep 25, 2026Cryptocurrency / Cybercrime Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets.  “At 18:31 UTC on September 24, 2026, Bitget’s security systems identified… 

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Ravie LakshmananSep 25, 2026Vulnerability / Email Security The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS… 

Accidentally deleted an important file? This  Windows recovery tool can help get it back

Accidentally deleted an important file? This $40 Windows recovery tool can help get it back

TL;DR: Recover deleted, formatted, corrupted, and otherwise inaccessible files with Magic Data Recovery for Windows. The lifetime Pro Edition license is currently $39.99 (MSRP $99.95), with unlimited recovery and support for more than 5,000 file types.… 

Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data

Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data

Swati KhandelwalSep 25, 2026Cloud Security / Vulnerability A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found… 

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Ravie LakshmananSep 25, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV)… 

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Swati KhandelwalSep 24, 2026Vulnerability / Mobile Security A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained… 

AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Ravie LakshmananSep 24, 2026Hacking News / Cybersecurity News This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked…