The Cyber Security Hub™
@TheCyberSecHub

World's Premier Cyber Security Portal™ #cybersecurity #infosec #hacking #tech 📧 info@thecybersecurityhub.com

 Global
linktr.ee/thecybersecurityhu…
Joined October 2016
1,104 Photos and videos
#cybersecurity #infosec #hacking
221
274
823
linkedin.com/pulse/microsoft…

Microsoft Teams To Give Administrators Greater Control Over Dangerous File Attachments

Microsoft is preparing to expand security controls in Microsoft Teams by allowing administrators to decide which file extensions should be blocked from chats and channels, giving organisations more...

linkedin.com
1
1,238
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks bleepingcomputer.com/news/se… #Security

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume...

bleepingcomputer.com
1,246
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials thehackernews.com/2026/09/lu…

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Lunex uses BYOVD to disable kernel security callbacks before stealing browser credentials and cryptocurrency wallets.

thehackernews.com
2
3
1,319
Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer bleepingcomputer.com/news/ar… #ArtificialIntelligence #Technology

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5.

bleepingcomputer.com
1,526
Microsoft pauses KB5002907 update after Office license deactivations bleepingcomputer.com/news/mi… #Microsoft

Microsoft pauses KB5002907 update after Office license deactivations

Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations.

bleepingcomputer.com
2
6
1,891
GitHub Actions re-enabled with Mini Shai-Hulud payload still active bleepingcomputer.com/news/se… #Security

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malici...

bleepingcomputer.com
1
1
1,906
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells thehackernews.com/2026/09/at…

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens of systems.

thehackernews.com
1,505
Zero Trust for AI Agents Starts With Fixing Zero Visibility thehackernews.com/2026/09/ze…

Zero Trust for AI Agents Starts With Fixing Zero Visibility

METR says an attacker bypassed authentication on an agentic app, obtained an API key, and used $600,000 in tokens over three weeks.

thehackernews.com
1
1
3
1,603
OpenAI's AI agents accidentally uploaded user-provided images to third-party sites bleepingcomputer.com/news/ar… #ArtificialIntelligence #Security

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks.

bleepingcomputer.com
1
1,739
linkedin.com/pulse/openai-mo…

OpenAI Models Access US Government Data & Attempt To Hack Education Department Website

OpenAI is reviewing its AI agents’ interactions with US government websites after disclosing access to public federal data, while independent researchers reported an unsuccessful attempt to hack an...

linkedin.com
2,052
Hackers hijack AI accounts and servers to fuel new cyber crime boom ft.com/content/3f406fbe-b72e…

Hackers hijack AI accounts and servers to fuel new cyber crime boom

Security researchers warn of surge in ‘LLM-jacking’ attacks targeting companies’ costly AI resources

ft.com
1
2
1,548
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link thehackernews.com/2026/09/el…

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Elementor 4.3.0 and 4.3.1 contain a CSRF flaw that can create an admin account when a logged-in administrator opens a crafted link.

thehackernews.com
1,281
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild thehackernews.com/2026/09/sh…

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

CISA adds exploited SharePoint RCE and RouterOS flaws to KEV; the RouterOS chain can give unauthenticated administrative access.

thehackernews.com
1,324
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack thehackernews.com/2026/09/ki…

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

Kiteworks urges a nine-hour precautionary shutdown after federal intelligence warned a threat actor may target some systems.

thehackernews.com
2
1,293
Cyber security stocks are pumped up on P(doom) ft.com/content/c3d9c47c-5431…

Cyber security stocks are pumped up on P(doom)

Besieged by growing cyber threats, organisations are hurling money at the problem

ft.com
1,934
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what? arstechnica.com/security/202… #cybersecurity #computerscience #computerengineering

Google ads caught delivering convincing scareware ads to unsuspecting users

Ads appearing all over the Internet are trying to scam people.

arstechnica.com
1
4
1,689
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions krebsonsecurity.com/2026/09/…
4
4
2,420
Kiteworks urges 6-hour server shutdown over potential zero-day attacks bleepingcomputer.com/news/se… #Security

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a...

bleepingcomputer.com
2
1,695
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw bleepingcomputer.com/news/se… #Security

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer...

bleepingcomputer.com
1,322
Threat detection dashboards are masking security coverage gaps helpnetsecurity.com/2026/09/…

Threat detection dashboards are masking security coverage gaps - Help Net Security

Research on 14,652 threat detections found 47% need fixing, with coverage gaps in one in three relevant MITRE ATT&CK techniques.

helpnetsecurity.com
1,344
Load more