admin – Page 23 – SMITH COMPUTER CONSULTING

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

Bleeping Computer, IT News / admin / September 26, 2026

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers. […]

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks Read More »

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Bleeping Computer, IT News / admin / September 26, 2026

Anthropic’s Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5. […]

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer Read More »

Microsoft pauses KB5002907 update after Office license deactivations

Bleeping Computer, IT News / admin / September 26, 2026

Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations. […]

Microsoft pauses KB5002907 update after Office license deactivations Read More »

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Bleeping Computer, IT News / admin / September 26, 2026

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. […]

GitHub Actions re-enabled with Mini Shai-Hulud payload still active Read More »

OpenAI’s AI agents accidentally uploaded user-provided images to third-party sites

Bleeping Computer, IT News / admin / September 26, 2026

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks. […]

OpenAI’s AI agents accidentally uploaded user-provided images to third-party sites Read More »

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

IT News, Krebs on Security / admin / September 25, 2026

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions Read More »

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Bleeping Computer, IT News / admin / September 25, 2026

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. […]

Kiteworks urges 6-hour server shutdown over potential zero-day attacks Read More »

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

Bleeping Computer, IT News / admin / September 25, 2026

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. […]

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw Read More »

Elementor WordPress flaw lets attackers create admin accounts

Bleeping Computer, IT News / admin / September 25, 2026

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. […]

Elementor WordPress flaw lets attackers create admin accounts Read More »

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

Bleeping Computer, IT News / admin / September 25, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. […]

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks Read More »