critical CVE-2026-42018, CVE-2026-42016, CVE-2026 Vulnerabilities

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers have been actively exploiting vulnerabilities in self-hosted JFrog Artifactory deployments to obtain administrator privileges, create persistent accounts, execute commands and install backdoors, raising serious concerns for organizations that rely on Artifactory as a central component of their software supply chains.

Zentrya One Desk 12 Sept 2026 8 min read

critical CVE-2026-51990 Vulnerabilities

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

A China-linked threat actor tracked as UNC3569 has exploited a newly disclosed vulnerability in Sogou Input Method for Windows to compromise systems and deploy the GRAYRABBIT backdoor, according to research from Gen Threat Labs.

Zentrya One Desk 12 Sept 2026 8 min read

Cyber Tips

📸 THE 80s PHOTO TREND: WHAT HAPPENS TO THE PICTURES YOU UPLOAD TO AI?

For many users, it is simply another fun social media trend.

Zentrya One Desk 12 Sept 2026 5 min read

critical CVE-2026-81578 and CVE-2026-82078 Vulnerabilities

PaperCut Replaces Emergency Patches With Permanent Fixes for Two Actively Exploited Vulnerabilities

PaperCut has released new regular maintenance updates for its PaperCut NG and PaperCut MF print-management platforms, replacing the emergency patches previously issued to address two vulnerabilities that have been actively exploited in the wild.

Zentrya One Desk 12 Sept 2026 6 min read

critical KB5124008 Threat Intel

Windows 11 Security Update KB5124008 Breaks Always On VPN Connections

Microsoft’s September 2026 security update for Windows 11 is causing connectivity problems for organizations using Always On VPN, with reports indicating that certificate-based VPN configurations can stop connecting after the update is installed.

Zentrya One Desk 11 Sept 2026 6 min read

critical Malware

Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis

A Russia-aligned threat actor has embedded an adversarial prompt inside malicious code to manipulate AI-powered malware analysis systems, attempting to trigger safety protections and prevent automated tools from examining the actual payload.

Zentrya One Desk 11 Sept 2026 8 min read

critical Malware

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

Threat actors are exploiting vulnerabilities in Cisco Secure Firewall Management Center (FMC) to gain access to enterprise environments, steal credentials and ultimately deploy Qilin ransomware, turning vulnerable security infrastructure into an entry point for broader network compromise.

Zentrya One Desk 11 Sept 2026 8 min read

critical Cloud & AppSec

Google Play Early Access Abused to Distribute Thousands of Deceptive Android Apps

Cybercriminals are exploiting Google Play's Early Access program to distribute deceptive Android applications, including fake gambling platforms, financial scams, game clones and potentially malicious utilities, while taking advantage of the lack of public ratings and reviews.

Zentrya One Desk 11 Sept 2026 8 min read

critical CVE-2026-20316 and CVE-2026-20079 Vulnerabilities

Hackers Exploit Critical Cisco Firewall Vulnerability to Gain Root Access and Deploy Malware

Threat actors are actively exploiting a critical vulnerability in Cisco firewall software to obtain elevated privileges and deploy malicious payloads, highlighting the growing risk posed by compromised internet-facing security appliances.

Zentrya One Desk 10 Sept 2026 6 min read