NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
October Windows Server Updates Break Exchange Sign-In and Mail Flow
Microsoft confirms this month's Windows Server security updates are causing OWA sign-in failures and stalled mail delivery on Exchange systems, and has…
MITRE ATT&CK v20 Adds AI Abuse, MFA Bypass, and Water Utility Attack Techniques
The latest ATT&CK release expands coverage of prompt injection, application-specific password theft, CAPTCHA bypass, and real-world intrusions against water utilities in Minnesota…
Critical BlockStrap Flaw Could Let Hackers Run Code on Magento Servers
Researchers warn that CVE-2026-103849, a maximum-severity template injection bug in Adobe Commerce and Magento, could soon be weaponized despite Adobe's lower urgency…
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Land Fast
Drupal has fixed two critical remote code execution vulnerabilities affecting all supported core versions, urging administrators to patch quickly before attackers reverse-engineer…
ConnectWise Cloud Backup Breach Hits Microsoft 365 Tenants via Stolen App Identities
Attackers authenticated directly as ConnectWise's Cloud Backup application using its secret, bypassing MFA and gaining broad access to mail, files, and Teams…
ConnectWise Disables Cloud Backup App IDs After M365 Tenant Breach
ConnectWise has suspended seven application identities, including ConnectWise Cloud Backup, after attackers used them to gain unauthorized access to customer Microsoft 365…
Attackers Exploited Collabora RCE in Nextcloud Weeks Before CVE Went Public
Threat actors began planting PHP web shells on Nextcloud servers via a flaw in the built-in Collabora CODE app in mid-September, more…
Proofpoint to Acquire Varonis in $6.3 Billion All-Cash Deal
The Thoma Bravo-owned email security giant is buying data security specialist Varonis in the largest cybersecurity acquisition announced so far in 2026,…
Palo Alto Networks Patches Exploited PAN-OS Zero-Day, CISA Adds It to KEV
A high-severity PAN-OS management interface flaw, CVE-2026-0322, is being actively exploited to gain root code execution. Patches are out and federal agencies…
Cisco Patches Actively Exploited Secure Email Gateway Root Flaw
A critical path traversal bug in Cisco Secure Email Gateway's Advanced Malware Protection feature is being exploited in the wild to gain…
North Macedonian Police Arrest Alleged Admin of OLVX Cybercrime Marketplace
A joint operation with the FBI led to the arrest of a suspect accused of running OLVX, a marketplace that sold stolen…
CISA Flags Actively Exploited Ivanti Connect Secure Zero-Day
A newly disclosed authentication bypass in Ivanti Connect Secure is under active exploitation, with attackers executing commands in memory to steal credentials…