Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.
Category: Cyber
Cybersecurity news from CISA, NIST, the FBI, national CERTs and vendor security teams: exploited vulnerabilities, advisories, breaches, ransomware and enforcement.
Cloudflare applies to become a public certificate authority
The company says it has applied to four root programs and agreed to buy a trusted root from GlobalSign, with free ACME-based issuance and post-quantum certificates planned.
CISA flags two high-severity flaws in Lantronix G520 gateways
Two vulnerabilities in the cellular gateway's update mechanism could let attackers run code with root privileges, CISA said, with fixed firmware available from Lantronix.
CISA lists nine Anjvision YSSD-RTMP-H5 flaws with no fix planned
CISA says the worst of the nine vulnerabilities scores 9.8 and could give an attacker full control of the device, and that the vendor has not responded.
BreakingApple Multiple Products flaw CVE-2026-86950 is being actively exploited, CISA warns
CISA added the Apple Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on September 29, 2026, with a federal remediation deadline of October 2, 2026.
Vulnerability Watch, September 29, 2026: 21 critical CVEs and 36 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
Meta says anti-scam campaign reached 303 million people in Asia-Pacific
Meta says its "One Step Ahead" education push, built with more than 25 agencies and safety groups, promoted passkeys, two-factor authentication and WhatsApp warnings across 18 countries.
GitHub Security Lab finds 24 Android bugs with AI taskflow agent
GitHub says custom LLM audit taskflows uncovered location tracking in OsmAnd and a Wikipedia app account takeover, but human review is still needed to judge severity.
AWS to cut European Sovereign Cloud off from global backbone Oct. 24
Amazon says the Brandenburg-based region will run for several hours without its global network backbone to produce evidence of EU operational independence.
Microsoft details NeedyMantis malware in targeted intrusions
Microsoft Threat Intelligence says the modular post-compromise framework has hit telecom firms, universities, nonprofits and government contractors since at least October 2025.