Cybersecurity - Page 21

Huntress says attackers exploit two AhsayCBS backup-server flaws to plant webshells and miners, and that 10.3.4 is affected. Ahsay says 10.3.4 fixes both.

Japanese hotel-booking software firm Temairazu says details of up to about 4.45 million guests may have been viewed or obtained. What it confirms.

Pays ApS told TV 2 its lawful access to Denmark's CPR register was abused. Politiken reports '123456' passwords on at least three accounts. What is confirmed.

XRPL's 9 October 2026 disclosure says an integer overflow in its payment engine could be exploited to create XRP from nothing. Fixed in xrpld 3.4.1 on 25 September, no evidence of exploitation. What an overflow and an amendment are, in plain English.

Anthropic's 9 October 2026 report describes four kinds of unintended actions by Claude on real websites. What the company confirms, what police and Axios report, and what the evidence does and does not show.

Anthropic has launched the Anthropic Cyber Mission: a Critical Infrastructure Defense Program with 11 founding partners and OSS Scanner, a free opt-in service that sends open-source projects unreviewed, model-written bug reports. What is confirmed, what is Anthropic's expectation, and what is not yet proven.

FBI Director Kash Patel says agents have arrested another suspected ShinyHunters co-conspirator over the FBIjobs.gov incident. The suspect's name and charges are not public; reports of a Canadian arrested in Pennsylvania rest on unnamed sources. What is confirmed, what is reported, and what is only the group's own claim.

JR East and Viewcard say about 6.09 million accounts, mostly email addresses, may be exposed after the IDC Frontier ransomware attack. What the companies and Japanese media report, what is not affected, and what it does not prove.

Three security items from 8–9 October 2026: a security firm reports attack attempts against a patched, maximum-severity SonicWall SMA1000 flaw (success unconfirmed); Pwn2Own Ireland pays $1,262,000 for 98 zero-days; and Microsoft says Windows Update certificates expire on 17 May and 19 June 2027.

An attacker returned 15,000 BNB to the 79thVault project on BNB Chain, a Manhattan jury convicted Uranium Finance hacker Jonathan Spalletta on all counts, and a London court jailed a SIM-swap fraudster for two and a half years. Plus two small DeFi exploits flagged by SlowMist.