BMC Daily Cyber News

1:46

Popular Tencent typing app used to install espionage...

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: Popular Tencent typing app used to install espionage backdoorWindows users can be infected with the GrayRabbit backdoor after clicking a crafted link handled by Tencent’s Sogou Input Method. A China-aligned espionage group is exploiting the weakness in the wild, and the app reportedly has hundreds of millions of installations in China. The attack combines unsafe command handling with an outdated Chromium 80 browser that runs without a sandbox. Key context: A successful

en

1:23

AI agents automate software break-ins across 395...

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: AI agents automate software break-ins across 395 organizations Hundreds of organizations were breached after a threat actor gave AI agents much of the work of exploiting PaperCut software. According to the report, the actor first built a working exploit and then used agents to automate break-ins across 395 organizations. This is a practical example of AI moving beyond advice or assistance into sustained execution at scale. Key context: Organizations running exposed or

en

1:53

GitLab secrets exposed as attackers move within 24 hours

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: GitLab secrets exposed as attackers move within 24 hours Secrets stored on self-hosted GitLab servers may already be exposed because attackers began exploiting a file-read weakness within 24 hours of disclosure. A single unauthenticated request can reveal S S H keys, database credentials, deploy tokens, CI/CD variables, and other configuration data. Affected versions include 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. Key context: Public-facing

en

1:25

Customer records exposed through a fake government...

BMC Daily Cyber News ·

2026/09/14

Daily Cyber News: Customer records exposed through a fake government request Revolut released sensitive identity and financial records after accepting a fraudulent request that appeared to come from a legitimate government agency. The material reportedly included copies of identity documents, verification selfies, contact details, account statements, and complete transaction histories for a limited number of users. Revolut said its systems and customer accounts weren’t compromised, customer

en

1:34

AI Agent Swarm Abused RubyGems and Took Over Build...

BMC Daily Cyber News ·

2026/09/13

Daily Cyber News: AI Agent Swarm Abused RubyGems and Took Over Build WorkersAn unusual campaign turned open-source infrastructure into a channel for code execution, storage and data retrieval. Researchers attributed the May activity to an internal OpenAI agent swarm, but that conclusion remains disputed. RubyGems said it couldn’t independently determine whether AI agents created or published the packages, while OpenAI described the agents’ tasks as benign and said it was investigating the

en

1:35

AI Misuse Turns Familiar Attacks Into Machine-Scale...

BMC Daily Cyber News ·

2026/09/13

Daily Cyber News: AI Misuse Turns Familiar Attacks Into Machine-Scale Operations AI is allowing smaller attacker groups to automate work that previously required several specialists. Anthropic recorded malicious use of Claude between December 2025 and August 2026 across cybercrime, espionage, surveillance, fraud and influence operations. In one case, an operator distributed a credential-harvesting pipeline across 10 AWS workers and scanned 1.8 million Android application packages for

en

1:39

Active GitLab Attacks Put Source Code and Secrets at...

BMC Daily Cyber News ·

2026/09/13

Daily Cyber News: Active GitLab Attacks Put Source Code and Secrets at Risk Self-managed GitLab servers are under active attack through a weakness that can expose sensitive files without an account or any user interaction. CISA added the issue to its priority catalog on September 11th. The affected releases include versions 18.7 through 19.1.7, 19.2 through 19.2.5 and 19.3 through 19.3.1. Key context: Successful exploitation could reveal source code, access tokens, deployment scripts,

en

1:33

AI-Personalized Invoice Fraud Hits One Million Emails...

BMC Daily Cyber News ·

2026/09/13

Daily Cyber News: AI-Personalized Invoice Fraud Hits One Million Emails in Three Days Accounts payable teams are facing a form of fraud that combines mass distribution with convincing personalization. From August 3rd to August 5th, one campaign sent more than one million emails claiming that targeted companies owed just under fifty thousand dollars for an annual ServiceNow subscription. The invoices looked realistic, and the attackers added forged email threads that appeared to involve

en

1:37

Personal-phone scams open the door to Microsoft 365...

BMC Daily Cyber News ·

2026/09/11

Daily Cyber News: Personal-phone scams open the door to Microsoft 365 data theftAttackers are reaching corporate cloud data by calling or texting employees on their personal phones. They pose as internal IT staff and create urgency around a passkey, multifactor authentication, or single sign-on setting that supposedly needs to be updated. The victim is then directed into a phishing or device-code flow that can hand over a usable Microsoft 365 session. For more cybersecurity news and the

en

1:53

Cloud breach linked to more than 153 million driver’s...

BMC Daily Cyber News ·

2026/09/11

Daily Cyber News: Cloud breach linked to more than 153 million driver’s license scans A breach at identity verification provider IDScan may have exposed highly sensitive government identity records. External reporting linked the company to a database advertised with more than 153 million driver’s license scans. IDScan has confirmed that an unauthorized third party may have accessed or copied customer information stored in its cloud platform. For more cybersecurity news and the full Daily

en

1:35

395 organizations breached in AI-driven print server...

BMC Daily Cyber News ·

2026/09/11

Daily Cyber News: 395 organizations breached in AI-driven print server campaign An AI-driven campaign against vulnerable PaperCut print servers breached hundreds of organizations around the world. The attacker used hundreds of AI agents to help build, test, and refine exploits before launching the operation. The campaign compromised at least 440 PaperCut instances tied to 395 organizations across 48 countries. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:57

Enterprise defenses exposed as attackers breach...

BMC Daily Cyber News ·

2026/09/11

Daily Cyber News: Enterprise defenses exposed as attackers breach firewall control consoles Enterprise defenses can become an attack route when the console managing them is compromised. Ransomware and state-linked attackers are actively exploiting two weaknesses in Cisco Secure Firewall Management Center. The issues allowed unauthorized access and, in some attacks, root-level control of the underlying system. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:28

Remote access disrupted after September Windows...

BMC Daily Cyber News ·

2026/09/11

Daily Cyber News: Remote access disrupted after September Windows server updates Organizations that rely on Windows Remote Desktop Services may face blocked work after installing the September 2026 cumulative updates. Administrators have reported failures across Windows Server 2019, 2022, and 2025. In some cases, servers work normally for several hours before new connections begin to hang or fail. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:27

Chrome users face a seventh exploited zero-day this year

BMC Daily Cyber News ·

2026/09/10

Chrome users are exposed to an actively exploited browser weakness until the latest update is installed. Google’s Chrome 153 release includes 230 security fixes, including a repair for an out-of-bounds write in the V8 engine. A crafted HTML page could use the issue to execute code inside the browser sandbox.For more cybersecurity news, visit DailyCyber.News. Training and resources: BareMetalCyber.com.

en

1:34

Record Microsoft patch load includes two exploited...

BMC Daily Cyber News ·

2026/09/10

Windows administrators face an unusually large patching workload, but two exploited weaknesses provide a clear place to start. Microsoft’s full September security release lists 974 vulnerabilities. After excluding cloud issues and fixes Microsoft applies itself, 964 require customer patching.For more cybersecurity news, visit DailyCyber.News. Training and resources: BareMetalCyber.com.

en

1:23

AI-generated flaw reports overwhelm teams and drive...

BMC Daily Cyber News ·

2026/09/10

AI may make potential vulnerabilities cheaper to find, but it can also make the security backlog far more expensive to manage. An analysis of an AI vulnerability project counted twenty six thousand one hundred fifty three generated findings. Only two thousand seven hundred thirty six had entered the disclosure ledger, just 202 were marked as patched, and 245 had been withdrawn.For more cybersecurity news, visit DailyCyber.News. Training and resources: BareMetalCyber.com.

en

1:29

Active attacks give intruders root control of Cisco...

BMC Daily Cyber News ·

2026/09/10

Next, the system used to manage network defenses is itself under active attack. A remotely exploitable authentication bypass can let an unauthenticated intruder take over affected Cisco Secure Firewall Management Center systems with root privileges. Cisco confirmed exploitation and said there are no workarounds.For more cybersecurity news, visit DailyCyber.News. Training and resources: BareMetalCyber.com.

en

1:18

Contractor account breach exposes data of 4.1 million...

BMC Daily Cyber News ·

2026/09/10

The immediate consequence is a serious loss of patient trust. Sensitive data tied to 4.1 million people was exposed after attackers entered AdaptHealth’s cloud-based business applications. The intrusion reached patient management systems, document storage platforms, and electronic health record portals.For more cybersecurity news, visit DailyCyber.News. Training and resources: BareMetalCyber.com.

en

1:39

Florida driver database breach claim puts identities...

BMC Daily Cyber News ·

2026/09/09

Florida drivers may face identity theft and targeted fraud if an extortion gang’s breach claim is confirmed. ShinyHunters claims it stole more than two hundred thousand records from Florida’s Driver and Vehicle Information Database. As evidence, the gang published a screenshot showing a record with an address, Social Security number, birth date, driver’s license details, and registered vehicles.For more cybersecurity news, visit DailyCyber.News. Training and resources: BareMetalCyber.com.

en

1:40

N-central attacks put downstream managed systems at risk

BMC Daily Cyber News ·

2026/09/09

Managed service providers and IT teams face broad downstream risk from active attacks against N-able N-central. N-able issued an emergency hotfix for a pre-authentication issue scored 10 that can enable remote code execution. In observed activity, an intruder created a user account designed to blend in with legitimate appliance users and installed Cloudflared in an environment that had been fully patched at the time.For more cybersecurity news, visit DailyCyber.News. Training and resources:

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

Good Morning America

ABC News

Israel Today: Ongoing War Report

Israel Today: Ongoing War Report

SuperTalk Mississippi News

SuperTalk Mississippi Media

Headline News from The Associated Press

The Associated Press