cybersecurity - Tech News from Simmons Systems (Page 7)

Tech News from Simmons Systems

cybersecurity

A collection of 633 posts

CISA Urges Immediate Patching of Actively Exploited SharePoint Vulnerabilities

CISA warns that attackers are actively exploiting three serious vulnerabilities in Internet-exposed, on-premises Microsoft SharePoint Server instances. These flaws, tracked as CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, affect all supported self-hosted versions of SharePoint Server. Attackers use them to bypass authentication, execute remote code, and establish persistence on compromised systems. According to

US Government Warns Russian State Hackers Target Home and Office Routers

Russian state-sponsored hacking groups backed by the FSB continue to mass-compromise home and small office routers worldwide, according to a new advisory from the Cybersecurity and Infrastructure Security Agency. The hackers exploit poorly configured devices, particularly those with exposed SNMP agents that still accept default or common credentials. Once compromised,

Hackers Compromise Jscrambler npm Package with Infostealer Malware

Hackers compromise the Jscrambler npm package, injecting information-stealing malware into versions 8.14, 8.16, 8.17, and 8.20. The malicious package executes during the preinstall hook and receives approximately 1,479 downloads within a two-hour window before Jscrambler deprecates it and releases a safe version. The company confirms

US and Allies Warn of Russian Hackers Targeting Critical Infrastructure Routers

Cybersecurity agencies from the United States and eight allied nations issue a joint advisory warning that Russian state hackers are actively targeting critical infrastructure networks. The advisory, co-authored by the NSA, FBI, and CISA alongside agencies from Australia, the UK, Canada, and several European nations, attributes the campaign to the

Australian Cyber Agency Warns of Global CMS Exploitation Campaign

The Australian Cyber Security Centre (ACSC) issues a warning about an ongoing global exploitation campaign that targets vulnerable content management systems and plugins. The agency reports that numerous small- to medium-sized Australian businesses already suffer compromises from the attacks. Threat actors actively scan websites for known flaws and deploy webshells,

prompt injection

Researchers Demonstrate "Ghostcommit" Attack That Hides Prompt Injection in Images to Steal AI Agent Secrets

Security researchers from the University of Missouri-Kansas City's ASSET Research Group demonstrate a new attack called "Ghostcommit" that hides malicious instructions inside PNG images to bypass AI code reviewers and steal repository secrets. The technique exploits a significant review gap: a survey of 6,480 pull

OpenAI Launches GPT-5.6 Family with Cybersecurity Focus and Cost Efficiency

OpenAI unveils its newest family of AI models with GPT-5.6, releasing in three distinct variants: Sol as the primary workhorse, Terra as an intermediate option, and Luna as a budget-friendly choice. CEO Sam Altman claims the new models deliver dramatic improvements in efficiency, with Sol using 54% fewer tokens

Former Ransomware Negotiators Sentenced to Prison for BlackCat Attacks

Three former employees of cybersecurity firms DigitalMint and Sygnia receive prison sentences for their roles in BlackCat (ALPHV) ransomware attacks against U.S. companies. Angelo Martino, Kevin Tyler Martin, and Ryan Clifford Goldberg plead guilty to conspiring with the notorious ransomware group, exploiting their insider knowledge to maximize extortion profits.

Accenture Confirms Data Breach as Hacker Sells Stolen Source Code

IT services giant Accenture confirms a security breach after a threat actor known as "888" claims to have stolen 35 GB of data from the company. The hacker begins offering the stolen data for sale on a cybercrime forum, advertising it as containing source codes taken during a

Convicted Felons Behind Offensive Cybersecurity Startup IRIS C2

A cybersecurity startup called IRIS C2 is drawing attention by offering up to $7 million for zero-day security vulnerabilities in popular software. The company, which claims to be based in McLean, Virginia, has amassed more than 4,000 followers on X since January 2025. Its website targets young engineers with

China-Linked Hackers Target University Researchers Through Roundcube Flaws

A China-linked threat cluster known as UNK_MassTraction targets Roundcube webmail servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. The campaign, observed since May, focuses on physics and engineering departments, professors, administrators, and organizations involved in astrophysics, particle physics, or national security-related research. The

Ubiquiti Patches Critical UniFi OS Flaws Including Max Severity Vulnerability

Ubiquiti releases security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw tracked as CVE-2026-50746. This vulnerability affects the UniFi Connect Application versions 3.4.16 and earlier, which customers use to manage commercial building operations such as smart LED lighting and electric vehicle chargers. A

AI Tool Discovers Critical Remote Code Execution Chain in Cisco CUCM

A security research initiative called 0day Rubbish announces the discovery of a critical remote code execution chain affecting Cisco Unified Communications Manager (CUCM). The vulnerability chain carries a CVSS severity score of 9.8, placing it in the highest risk category and signaling a potentially devastating impact for affected deployments.

adobe coldfusion

Hackers Exploit Maximum-Severity Adobe ColdFusion Flaw Within Hours of Disclosure

Attackers are actively exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, which enables remote code execution on unpatched systems without requiring any privileges. The flaw affects ColdFusion versions 2025.9, 2023.20, and earlier releases of the popular enterprise web application development platform. Adobe released security updates on July