BMC Daily Cyber News

1:29

Hijacked AI coding session spreads compromise across...

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: Hijacked AI coding session spreads compromise across about 100 repositoriesA compromised software development workflow allowed malicious activity to spread across about 100 internal code repositories. Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider. Before that repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. Key context: This

en

1:42

Active attacks put Cisco identity and firewall...

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: Active attacks put Cisco identity and firewall controls at risk Cisco says weaknesses affecting core network trust controls are already being exploited. Its September hardening releases cover multiple issues across Secure Firewall products, Firewall Management Center, Identity Services Engine and related components. Cisco says two firewall-management issues and one Identity Services Engine authentication-bypass issue are known to be actively exploited. Key context: The

en

1:35

Windows update leaves some enterprise users locked out

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: Windows update leaves some enterprise users locked out Some Windows 11 enterprise users are being locked out even though their domain credentials are valid. Microsoft is investigating reports that the KB5124008 security update causes affected computers to lose their secure channel with Active Directory after installation and a restart. Administrators have linked the behavior to Machine Identity Isolation, but Microsoft hasn’t confirmed the root cause or published an

en

1:19

Trusted WordPress update backdoors at least 1,500...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: Trusted WordPress update backdoors at least 1,500 customer sitesA trusted update channel delivered malicious code to at least one thousand five hundred WordPress sites. An attacker compromised the Admin Menu Editor Pro maintainer’s website and inserted a web shell and hidden user account into versions 2.35 and 2.36. The developer estimated that at least 230 customers installed the first malicious update, often across multiple sites, and warned that the total number could

en

1:44

Microsoft emergency fixes show patching is now an...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: Microsoft emergency fixes show patching is now an operational risk A major Microsoft security rollout disrupted remote access, virtualization, and audio functions in some environments. Microsoft issued emergency updates after September’s Patch Tuesday caused Remote Desktop Services instability, unavailable host-folder shares in some Hyper-V Linux virtual machines, and failures involving certain USB audio devices. The original release addressed 974 unique vulnerabilities,

en

1:24

CenterPoint confirms customer data theft from an...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: CenterPoint confirms customer data theft from an external-facing system CenterPoint Energy has confirmed that an unauthorized party stole personal information relating to some customers through an external-facing system. An attacker claimed to have taken 7.49 million records, but CenterPoint hasn’t confirmed that number or the specific types of data involved. The company says its electric and natural gas services weren’t disrupted, and the investigation is still

en

1:37

Japan government VPN breach puts 246,000 personal...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: Japan government VPN breach puts 246,000 personal records at risk A patchable V P N weakness may have exposed approximately two hundred forty six thousand personal records held by Japan’s Digital Agency. The affected Government Solution Service is a shared platform used by multiple ministries and government bodies. The records relate to about one hundred eighty nine thousand employees and public officials, plus fifty seven thousand contractors and supporting

en

1:29

AI agents are spreading faster than companies can...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: AI agents are spreading faster than companies can govern them Autonomous AI failures are already causing data loss, financial damage, operational disruption, and brand harm. A survey covered 202 senior AI decision-makers at large publicly traded U.S. companies. Among respondents using agentic AI, nearly six in 10 reported that no single group oversaw agents after deployment. Key context: The challenge is that policies designed to review AI outputs may not control systems

en

1:37

Active attacks put Cisco email security gateways at...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: Active attacks put Cisco email security gateways at root-level riskA system designed to stop malicious email can now become an attacker’s privileged foothold. Attackers have exploited a weakness affecting on-premises Cisco Secure Email Gateway appliances running AsyncOS 16.5, 16.0, and 15.5 and earlier. A crafted email can trigger the issue without any user interaction and lead to command execution with root privileges. Key context: Root access could allow an attacker to

en

1:27

Ransomware gangs exploit VMware control systems to...

BMC Daily Cyber News ·

2026/09/16

Daily Cyber News: Ransomware gangs exploit VMware control systems to reach enterprise data Enterprise virtualization environments now have a confirmed ransomware path through VMware vCenter. CISA says ransomware gangs have joined ongoing attacks against a critical directory-traversal issue that Broadcom patched on July 29th. An unauthenticated attacker can abuse the vCenter Syslog server to execute arbitrary code. Key context: This matters because vCenter can provide reach into virtual

en

1:30

Russian-linked malware turns Cisco management systems...

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: Russian-linked malware turns Cisco management systems into spy postsNetwork-management systems can become surveillance posts after they’re compromised. A likely Russia-linked actor is chaining two weaknesses in Cisco Firewall Management Center to install an upgraded Cyclops Blink implant. The malware can harvest credentials, scan internal networks, and capture live traffic. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:38

VPN breach exposed 246,000 Japanese government...

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: VPN breach exposed 246,000 Japanese government personnel records Government employees face increased impersonation and phishing risk after a V P N-related breach at Japan’s Digital Agency. Around two hundred forty six thousand record rows containing personal information may have been exposed after an attacker exploited a known, medium-severity V P N issue and accessed a maintenance and operations account. The investigation began when the agency detected large-scale file

en

1:33

Emergency Windows fixes restore disrupted remote access

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: Emergency Windows fixes restore disrupted remote access Remote work and system administration were disrupted after September Windows security updates destabilized Remote Desktop Services. Affected systems experienced failed connections and sign-ins, unresponsive servers, and problems in related tools including Microsoft Management Console and File Explorer. Microsoft issued out-of-band updates on September 14th for affected Windows and Windows Server versions. For more

en

1:45

GitLab attacks put development secrets and supply...

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: GitLab attacks put development secrets and supply chains at riskDevelopment secrets and downstream systems are exposed as attackers exploit a maximum-severity issue in self-managed GitLab. Under certain conditions, an unauthenticated request can read arbitrary files from affected Community and Enterprise Edition servers. Observed activity progressed from initial probing to the theft of configuration files and S S H settings that may contain credentials and CI/CD

en

1:31

AI is shrinking cyber response windows from months to...

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: AI is shrinking cyber response windows from months to minutes Defenders may have minutes, not months, to act as advanced AI speeds vulnerability discovery, attack planning, and data theft. ENISA says vulnerability weaponization may now occur within 15 minutes of disclosure. Research cited in its assessment puts the median time from initial access to data exfiltration at 72 minutes. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:28

Cisco email gateways face active attacks with root...

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: Cisco email gateways face active attacks with root access at stake Enterprise email boundaries are at risk because attackers are actively exploiting Cisco Secure Email Gateway appliances. A crafted message can pass through an affected device and trigger commands with root privileges without any authentication. Cisco released software fixes, says there are no workarounds, and reported active exploitation in September 2026. For more cybersecurity news and the full Daily

en

1:34

Government impostor exposed Revolut customer IDs and...

BMC Daily Cyber News ·

2026/09/15

Daily Cyber News: Government impostor exposed Revolut customer IDs and finances Revolut customers face identity fraud and highly convincing financial scams after the company released sensitive records to an unauthorized requester. The requests came from an email address on a legitimate government agency domain and carried valid domain-authentication credentials, so Revolut treated them as genuine. The disclosed information may have included identity details, passport or driver’s license

en

1:46

Popular Tencent typing app used to install espionage...

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: Popular Tencent typing app used to install espionage backdoorWindows users can be infected with the GrayRabbit backdoor after clicking a crafted link handled by Tencent’s Sogou Input Method. A China-aligned espionage group is exploiting the weakness in the wild, and the app reportedly has hundreds of millions of installations in China. The attack combines unsafe command handling with an outdated Chromium 80 browser that runs without a sandbox. Key context: A successful

en

1:23

AI agents automate software break-ins across 395...

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: AI agents automate software break-ins across 395 organizations Hundreds of organizations were breached after a threat actor gave AI agents much of the work of exploiting PaperCut software. According to the report, the actor first built a working exploit and then used agents to automate break-ins across 395 organizations. This is a practical example of AI moving beyond advice or assistance into sustained execution at scale. Key context: Organizations running exposed or

en

1:53

GitLab secrets exposed as attackers move within 24 hours

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: GitLab secrets exposed as attackers move within 24 hours Secrets stored on self-hosted GitLab servers may already be exposed because attackers began exploiting a file-read weakness within 24 hours of disclosure. A single unauthenticated request can reveal S S H keys, database credentials, deploy tokens, CI/CD variables, and other configuration data. Affected versions include 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. Key context: Public-facing

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

Good Morning America

ABC News

Israel Today: Ongoing War Report

Israel Today: Ongoing War Report

SuperTalk Mississippi News

SuperTalk Mississippi Media

Headline News from The Associated Press

The Associated Press