BMC Daily Cyber News

1:51

Exploited Zyxel switches expose nearly 1,000 systems...

BMC Daily Cyber News ·

2026/09/22

Daily Cyber News: Exploited Zyxel switches expose nearly 1,000 systems worldwide Organizations using Zyxel GS1900 switches face confirmed exploitation across 996 devices in 48 countries. CISA added C V E dash 2026 dash 7273 to its Known Exploited Vulnerabilities catalog on September 21st, making this a clear patching priority. Researchers linked the activity to a Chinese-speaking actor that has targeted Zyxel, WordPress, and Ubiquiti systems since at least June. Key context: This matters

en

1:21

Foreign hackers alter water controls at two Colorado...

BMC Daily Cyber News ·

2026/09/22

Daily Cyber News: Foreign hackers alter water controls at two Colorado utilitiesForeign hackers changed operational settings and alarms at two small Colorado water utilities in late August. They altered pumping cycles and disabled remote access and alarms, but the providers responded quickly. Water service and public safety weren’t affected. Key context: The absence of an outage doesn’t make this a minor event. Additional detail: Defenders should identify exposed controllers, remove remote

en

1:22

Remote car access exposed headlights, location and...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: Remote car access exposed headlights, location and cabin audioConnected-car weaknesses can create both physical danger and surveillance risk for drivers and passengers. During a reported two-week test of a BYD Shark 6, a security researcher found an entry point protected by no password. The researcher then remotely controlled the vehicle’s doors, audio, infotainment display, wipers, and headlights. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:50

Malicious npm packages hide after installation and...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: Malicious npm packages hide after installation and strike at runtime Development teams can be compromised even when a package installation looks completely clean. In an ongoing N P M campaign, malicious code was placed inside the normal runtime behavior of the indexed-btree package instead of using installation scripts that newer defenses can block. The loader activates through a commonly used library method, but only when that method receives a specific key value. For

en

1:31

Attackers used a Microsoft-attested Windows driver to...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: Attackers used a Microsoft-attested Windows driver to disable 145 security tools Victims could lose passwords, browser sessions, and cryptocurrency data after a malware campaign used a trusted-looking Windows driver to disable endpoint protection. Attackers created fake GitHub pages that impersonated LastPass Authenticator, although LastPass systems, services, and customer vaults were not compromised. The downloaded payload deployed a Microsoft-attested Windows kernel

en

1:51

North Korean-linked operators used fake job...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: North Korean-linked operators used fake job interviews to infect 30,000 devicesDevelopers and employers now face theft and network intrusion through recruitment processes that look routine. Authorities said North Korean-linked operators infected more than thirty thousand devices across 100+ countries between December 2025 and July 2026. The campaign obtained funds or account credentials from more than seven thousand cryptocurrency wallets and moved at least ten point

en

1:31

AI agents turn trusted tools and memory into a new...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: AI agents turn trusted tools and memory into a new attack surface AI risk changes when a model gains access to files, email, persistent memory, external tools, or command execution. At that point, a bad output can become a harmful action. A review of recent research identified attack paths involving poisoned skills, prompt injection, compromised tools, structural jailbreaks, and unsafe behavior. For more cybersecurity news and the full Daily Cyber newsletter, visit

en

1:45

Exposed cPanel servers are being pulled into Mirai...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: Exposed cPanel servers are being pulled into Mirai botnets Hosting providers and their customers face disruption as attackers exploit a critical authentication bypass in cPanel and WHM. The weakness lets an attacker reach administrative functions without a valid account, creating a path to server takeover. Monitoring found a sharp increase in Mirai-like traffic targeting Telnet, and many source addresses were linked to hosting providers running cPanel interfaces. For more

en

1:37

Gyazo breach exposes 23.62 million users and image...

BMC Daily Cyber News ·

2026/09/21

Daily Cyber News: Gyazo breach exposes 23.62 million users and image metadata Millions of Gyazo users now face account and privacy risk after attackers accessed the screenshot-sharing service’s database. Helpfeel says the attackers exploited a weakness in an image upload server on September 11th, ran arbitrary commands, and stole approximately 23.62 million user records. The exposed information included names, email addresses, password hashes, session IDs, device IDs, and tokens for

en

1:34

GhostCode can hijack Microsoft 365 accounts in as...

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: GhostCode can hijack Microsoft 365 accounts in as little as 78 secondsA Microsoft 365 account can be taken over even when the victim completes authentication, including multifactor authentication, on a legitimate Microsoft page. The GhostCode phishing kit does this by persuading a user to approve a device-code sign-in that is actually linked to the attacker. In one observed intrusion, the attackers made nine successful A P I calls, registered three devices in 78 seconds,

en

1:54

Apple update closes 273 security gaps, including one...

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: Apple update closes 273 security gaps, including one under attack Apple users face a broad patching cycle covering 273 unique security issues across the company’s operating-system and development ecosystem. One issue in Screen Sharing Server is listed in CISA’s Known Exploited Vulnerabilities catalog. It can allow a network attacker to authenticate to Screen Sharing without valid credentials or user interaction. Key context: For organizations with mixed Apple fleets, this

en

1:30

Cisco hardening releases address actively exploited...

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: Cisco hardening releases address actively exploited security gaps Network access and firewall management systems need urgent review following major Cisco hardening releases. Updates for Secure Firewall products address multiple internally discovered security issues, including two that Cisco says are known to be actively exploited. A separate Identity Services Engine hardening release addresses another issue known to be under active exploitation. Key context: Security

en

1:44

Utility customer data exposed through an...

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: Utility customer data exposed through an internet-facing system Personal information belonging to some CenterPoint Energy customers was obtained through an external-facing company system. The utility confirmed the breach after learning about an online claim involving a customer dataset, then began investigating with outside cybersecurity experts. CenterPoint hasn’t confirmed how many people were affected or which categories of information were taken. Key context: That

en

1:28

A hijacked AI coding session reportedly spread a worm...

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: A hijacked AI coding session reportedly spread a worm across about 100 repositories A hijacked AI coding-assistant session reportedly helped an attacker spread malicious code across about 100 internal repositories at an unnamed software-as-a-service provider. According to Mandiant, the assistant first recommended software that the attacker had poisoned, and someone accepted that recommendation. The resulting Shai-Hulud activity then spread through the internal repositories

en

2:01

ScreenConnect attacks turn trusted remote access into...

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: ScreenConnect attacks turn trusted remote access into an entry pointAttackers are now exploiting ScreenConnect to transfer or execute files through active remote sessions without proper authorization or confirmation from the host user. The issue affects ScreenConnect clients and is fixed in version 26.6.5 and later. CISA added it to the Known Exploited Vulnerabilities catalog and required rapid remediation by federal agencies. Key context: The concern is bigger than one

en

1:29

Windows update locks some workers out of domain accounts

BMC Daily Cyber News ·

2026/09/18

Daily Cyber News: Windows update locks some workers out of domain accounts Some Windows 11 users are being locked out of their domain accounts even though their credentials are still valid. Microsoft is investigating reports that update KB5124008 can break the secure channel between certain enterprise computers and Active Directory after the devices restart. Administrators have linked the failures to Machine Identity Isolation settings, but Microsoft hasn’t confirmed the cause or published

en

1:28

Targeted attacks exploit a Pixel modem weakness...

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: Targeted attacks exploit a Pixel modem weakness without user actionSupported Pixel phones face a high-severity cellular modem weakness that has been used in limited, targeted attacks. Google says the issue can allow an attacker to escalate privileges through a permission bypass without requiring user interaction. The available reporting describes an adjacent-network attack path rather than broad exploitation from anywhere on the internet. Key context: The modem is a

en

1:45

Browser extensions could seize control of five...

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: Browser extensions could seize control of five built-in AI assistants A proof-of-concept attack demonstrated that an ordinary browser extension could take control of a privileged AI assistant. The BragJack research affected AI environments in Chrome, Edge, Opera Neon, Perplexity Comet and Claude in Chrome. The attack crossed a boundary between untrusted extensions and highly privileged agents, enabling access to sensitive information and potentially destructive

en

1:38

CenterPoint customer data exposed through an...

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: CenterPoint customer data exposed through an internet-facing system CenterPoint Energy has confirmed that an unauthorized third party obtained personal information belonging to some customers. The utility said the data was accessed through an internet-facing company system after it learned of an online post claiming to offer customer information. CenterPoint hasn’t disclosed how many people were affected or which categories of personal data were involved. Key context: The

en

1:50

Active ScreenConnect attacks threaten trusted remote...

BMC Daily Cyber News ·

2026/09/17

Daily Cyber News: Active ScreenConnect attacks threaten trusted remote access Attackers are actively exploiting a ScreenConnect weakness that can turn a trusted remote session into a delivery path for unauthorized files. CISA added the issue to its Known Exploited Vulnerabilities catalog and required urgent remediation by federal agencies. The weakness affects ScreenConnect clients and can allow file transfer or execution through an active remote session without host confirmation. Key

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

朝日新聞AJW 英語ニュース（The Asahi Shimbun Asia & Japan Watch）

朝日新聞ポッドキャスト

Fox News Radio 1 Minute Newscast

FOX News Podcasts

Business of Tech: Daily MSP News & IT Services Analysis

MSP Radio, Dave Sobel, Managed Service...

SBS Greek - SBS Ελληνικά

SBS