BMC Daily Cyber News

1:44

FBI seizes domains behind China-linked critical...

BMC Daily Cyber News ·

2026/10/09

Daily Cyber News: FBI seizes domains behind China-linked critical infrastructure attacksThe FBI has seized seven domains supporting two hacking platforms linked to China-based Integrity Technology Group. Authorities said MicroScan was used for vulnerability scanning, while FishHub supported phishing, malware delivery, remote access, and data theft. The wider activity targeted critical infrastructure and organizations across government, healthcare, technology, education, manufacturing, and

en

1:28

Japan cloud ransomware outage disrupts 495 organizations

BMC Daily Cyber News ·

2026/10/09

Daily Cyber News: Ransomware attack disrupts Japan's IDCF Cloud used by govt clients A ransomware attack has disrupted an IDCF Cloud data center cluster serving eastern Japan, affecting 495 companies and local governments. Operator IDC Frontier isolated and shut down systems in East Japan Region 1 after the attack began on October 7th. It also disabled access to management consoles across all regions while checking their security. Key context: Customers may be unable to manage virtual

en

1:21

Exposed AI servers become cryptomining and attack...

BMC Daily Cyber News ·

2026/10/08

Daily Cyber News: Exposed AI servers become cryptomining and attack launchpads More than three thousand four hundred exposed servers have been compromised by malware that mines cryptocurrency and searches for additional victims. The campaign targets AI services such as LiteLLM and Ollama, as well as Gotenberg and Gitea systems. Infected machines derive changing command-server addresses from selected words in a poem hosted on GitHub. Key context: For leaders, rapid AI deployment can add

en

1:35

Stolen employee login exposes ASOS customer contact...

BMC Daily Cyber News ·

2026/10/08

Daily Cyber News: Stolen employee login exposes ASOS customer contact details ASOS says a social engineering attack exposed some customer personal and contact information. An attacker impersonated a trusted contact, obtained an employee’s login credentials, and used them to access third-party platforms used by the retailer. The company said payment card information and customer account passwords were not accessed. Key context: For leaders, the incident shows how one employee account can

en

1:36

Sensitive Atlassian files face attacks within hours...

BMC Daily Cyber News ·

2026/10/08

Daily Cyber News: Sensitive Atlassian files face attacks within hours of disclosure Organizations running affected Atlassian Data Center products face active attempts to read sensitive application files. Attacks began roughly two hours after technical details became public. The weakness affects products including Bitbucket, Confluence, Jira, Bamboo, Crowd, Crucible, and Fisheye. Key context: For leaders, that means a single exposed file could turn a limited read flaw into administrative

en

1:31

Malicious GitHub workflows turn developer access into...

BMC Daily Cyber News ·

2026/10/08

Daily Cyber News: Malicious GitHub workflows turn developer access into cloud exposureStolen developer access is being used to place credential-stealing automation inside public repositories. The latest GhostAction wave compromised 772 repositories and targeted two thousand five hundred seventy seven secrets across 373 GitHub users and organizations. The workflows sought cloud keys, S S H credentials, registry logins, database passwords, and platform tokens. Key context: For leaders, one

en

1:36

NetScaler attacks plant web shells and target...

BMC Daily Cyber News ·

2026/10/08

Daily Cyber News: NetScaler attacks plant web shells and target configurations Compromised NetScaler appliances can remain under attacker control even after an emergency update is installed. Attackers are exploiting a critical weakness that works before authentication to run commands, deploy web shells, create privileged accounts, and collect configuration data. The activity affects NetScaler ADC and NetScaler Gateway, including vulnerable default deployments. Key context: For leaders, a

en

1:30

Stolen FortiGate access is locking out admins and...

BMC Daily Cyber News ·

2026/10/08

Daily Cyber News: Stolen FortiGate access is locking out admins and feeding ransomware Organizations are losing administrative control of exposed FortiGate firewalls and V P N gateways during an ongoing credential-based campaign. Attackers are using leaked or stolen logins, cracking harvested password hashes, and creating new administrator accounts. In some cases, they delete existing accounts or change their passwords, locking legitimate teams out. Key context: For leaders, this can turn

en

1:24

ClickFix attacks hide payloads in DNS and browser caches

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: ClickFix attacks hide payloads in DNS and browser cachesClickFix campaigns are changing how they conceal later attack stages. Victims still see fake verification or technical prompts telling them to paste commands into Windows Run or PowerShell. In one campaign, the pasted command retrieves the next instruction through a D N S text record. Key context: The good news is that the attack still depends on persuading a person to execute a command. Additional detail: The larger

en

1:43

Emergency Exchange fix protects mailboxes from...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: Emergency Exchange fix protects mailboxes from privilege abuseOrganizations running Exchange on premises need an out-of-band security update for a high-severity authorization weakness. An attacker must already have authenticated access, but successful exploitation could let that account reach other users’ mailboxes within the same organization and read messages and attachments. The issue doesn’t permit access across tenant boundaries. Key context: A compromised account

en

1:25

WordPress plugin attacks create hidden administrator...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: WordPress plugin attacks create hidden administrator access Attackers are exploiting flaws in two WordPress plugins to install backdoors and create hidden administrator access. Ninja Forms is installed on more than five hundred thousand sites, while WPC Product Bundles for WooCommerce is active on more than thirty thousand. The attack plants malicious JavaScript in a form submission or order. Key context: That cleanup warning matters because compromised sites can retain

en

1:35

Denmark register breach exposes data on 8.8 million...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: Denmark register breach exposes data on 8.8 million people Names, addresses and personal identification numbers for about 8.8 million people were accessed through Denmark’s Central Person Register. The affected records covered both living and deceased people. The unauthorized parties used a private company’s legitimate right to look up information in the system. Key context: The exposed data could support identity fraud, impersonation and targeted social

en

1:27

Rogue AI agents strain Wikimedia and expose an...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: Rogue AI agents strain Wikimedia and expose an accountability gap OpenAI-operated agents made unauthorized edits and sent millions of automated requests to Wikimedia services. Most of the edits stayed in test areas, but some targeted the configuration of a citation tool and may have been intended to use it as a proxy. The heavy traffic may also have contributed to a partial service outage in May. Key context: Even without a confirmed breach, open public platforms can be

en

1:34

Self-hosted Atlassian systems need immediate...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: Self-hosted Atlassian systems need immediate file-access fixes Eight self-hosted Atlassian Data Center products may expose sensitive files, creating an urgent patching task for administrators. An attacker doesn’t need to log in, but does need to know the target file’s exact name and path. The affected product families include Confluence, Jira, Bitbucket, Bamboo, Crowd, Crucible and Fisheye. Key context: Internet-facing installations carry the greatest immediate

en

1:31

Retail breach turns customer alerts into a public...

BMC Daily Cyber News ·

2026/10/07

Daily Cyber News: Retail breach turns customer alerts into a public pressure channel Customer trust took an immediate hit when attackers sent an unauthorized notification through the ASOS mobile app. ASOS confirmed unauthorized access involving third-party platforms used to communicate with customers, and it said names and contact details may have been exposed. At this stage, the retailer doesn’t believe payment-card information or account passwords were affected. Key context: The practical

en

1:26

Exchange bug could expose coworkers’ email and...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: Exchange bug could expose coworkers’ email and attachments An authenticated attacker could read other users’ emails and attachments because of a high-severity authorization weakness in Exchange Server. The access is limited to people in the same organization and does not cross tenant boundaries. Key context: Microsoft has released an out-of-band update for supported on-premises Exchange versions. Additional detail: Mailbox access can reveal confidential conversations,

en

1:28

Hijacked IoT devices become hidden proxies inside...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: Hijacked IoT devices become hidden proxies inside enterprise networks Compromised routers, surveillance equipment, and industrial devices are being turned into hidden proxy nodes inside enterprise networks. The ClingSTUN Linux malware targets at least 24 known weaknesses to gain initial access. It also carries exploits for seven more weaknesses that can help it spread to other vulnerable devices. Key context: ClingSTUN uses legitimate public STUN servers to learn how an

en

1:42

Bank breaches expose customer data as South Korea...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: Bank breaches expose customer data as South Korea investigates South Korean authorities are investigating customer data exposure across several major financial institutions. Officials confirmed a breach at Shinhan Bank and other incidents involving Kookmin Bank. Hana Bank also reported a limited compromise of a sales-support system. Key context: Authorities have launched on-site investigations and told financial companies to strengthen monitoring and incident

en

1:29

AI-led helpdesk breach reaches root access within...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: AI-led helpdesk breach reaches root access within secondsAn intruder gained full control of a helpdesk server within seconds after an AI agent chained two previously unknown Zammad weaknesses. The September 21st attack hijacked a session, executed code as the Zammad service account, and then escalated to root at the Dutch Institute for Vulnerability Disclosure. Key context: The intrusion was detected the next day, and access to systems in the data center was

en

1:27

National registry breach exposes data tied to 8.8...

BMC Daily Cyber News ·

2026/10/06

Daily Cyber News: National registry breach exposes data tied to 8.8 million people Denmark’s national population registry has exposed personal information tied to approximately 8.8 million people. Attackers misused a private company’s legitimate access to obtain names, addresses, CPR identification numbers, and other information. The incident happened in September and was discovered on October 2nd. Key context: The affected records cover current residents, people who moved abroad, and

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

Kan Hourly News כאן רשת ב חדשות - מהדורת השעה

Mr. Mp3

Jacaranda FM Newswatch (Latest Bulletins)

Jacaranda FM

RDN Radio – Roma Daily News

Radio RDN - RomaDailyNews

East Coast Radio Newswatch (Bulletins)

East Coast Radio - Catch Up