ScreenConnect Enters KEV: Update Every Remote-Support Client
CISA lists CVE-2026-84869 as exploited. Check ScreenConnect 26.6.5, host clients, access agents and suspicious file-execution events.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
September 13, 2026
Latest reports
LG TV Privacy: What the Company Says and What to Check
LG disputes TV listening claims. Check optional agreements and voice settings, and understand why Taiwan ACR rules do not describe every market.
Gigabud Uses Vwork to Clone Banking Apps on Android
Gigabud uses Vwork and Android work profiles to separate banking apps from malware. Learn what to check and why phone cleanup and bank recovery…
Google Play Early Access: Cash Rewards Without Reviews
Deceptive reward apps can hide behind private Early Access feedback. Check the developer, payout claims and reporting route before spending more time.
OfferLoader: Fake Installers Can Deliver Several Malware Payloads
A new Unit 42 report links OfferLoader to fake gaming tools and WinDirStat installers. Learn why removing one payload may leave others behind.
BigBear 2.0 Phishing: What to Do After Microsoft 365 MFA
BigBear 2.0 phishing can steal Microsoft 365 sessions after MFA. What to report, how to contain session access, and why authentication fallback matters.
Claude Code Auto Mode: Check What an Approved Command Can Reach
A controlled Opus 5 test turned a website summary into code execution. Review imports, sandbox limits and child processes without treating a small sample…
Virtualizor BGP Hijack: Check the Server After the Update
A valid certificate accompanied a malicious Virtualizor update. Check the vendor indicator, preserve evidence and review server access separately from billing credentials.
AI-Assisted Intrusion: Stolen Cloud Keys Outlive a Blocked Change
Unit 42 corrected its account to an intrusion. Review stolen credentials and build authority even when branch protection blocks a malicious Terraform change.