Record · corpus.blog/posts/01a0e50f-6b14-70d7-bf4c-a65990bb10df

Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol

news.risky.biz · published 25 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at news.risky.biz Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 104
Words captured: 3,769

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://specterops.io/

specterops.io

https://www.elttam.com/blog/att-cking-tacacs-to-pwn-your-network-via-a-pre-auth-rce

elttam.com

https://blog.talosintelligence.com/salt-typhoon-analysis/

blog.talosintelligence.com

https://www.sygnia.co/blog/fire-ant-evolves-from-hypervisors-to-trusted-infrastructure/

sygnia.co

OpenAI hacked Medicare portal, Prime Minister Anthony Albanese says Read at the source ↗

abc.net.au

https://www.abc.net.au/news/2026-09-24/federal-politics-live-blog-openai-medicare-breach/107186578

abc.net.au

Early rogue AI agent activity and attempts to hack found on urlquery.net Read at the source ↗

transluce.org

https://databreaches.net/2026/09/23/canva-hacked-via-vendors-salesforce-instance-other-customers-affected-as-well/

databreaches.net

https://www.spokesman.com/stories/2026/sep/22/spokane-public-schools-experience-cybersecurity-in/?ref=dysruptionhub.com

spokesman.com

https://rekt.news/nostra-rekt

rekt.news

https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/

en.cryptonomist.ch

https://x.com/realScamSniffer/status/2103059906303869042

x.com

https://neworleanscitybusiness.com/blog/2026/09/22/louisiana-lng-tanker-cyberattack/

neworleanscitybusiness.com

https://splash247.com/crew-claims-hackers-seized-control-of-lng-carrier-safety-systems/?utm_source=Securitylab.ru

splash247.com

https://www.reuters.com/world/hacked-fbi-data-has-sensitive-information-about-employees-intelligence-roles-2026-09-23/

reuters.com

https://bsky.app/profile/did:plc:l4l2shylrjyxurbrmxsxceyc?ref_src=embed

bsky.app

https://bsky.app/profile/did:plc:l4l2shylrjyxurbrmxsxceyc/post/3mw7fjhsf5c2l?ref_src=embed

bsky.app

https://canonical.com//blog/accelerating-delivery-of-cve-fixes-with-a-new-kernel-release-strategy

canonical.com

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html

chromereleases.googleblog.com

https://developer.chrome.com/blog/new-in-chrome-154

developer.chrome.com

https://www.dexerto.com/gaming/new-microsoft-patent-could-put-in-game-ads-after-boss-fights-multiplayer-matches-and-cutscenes-3411409/

dexerto.com

https://blog.youtube/news-and-events/made-on-youtube-viewer-custom-feeds-shopping-tools/

blog.youtube

OpenAI extends cyber access to Ukraine for civilian defense Read at the source ↗

openai.com

https://cyberscoop.com/pentagon-cyber-operations-demand-exceeds-supply-defensetalks-2026/

cyberscoop.com

https://www.cisa.gov/resources-tools/resources/cve-program-establishing-quality-era-framework

cisa.gov

https://www.warner.senate.gov/wp-content/uploads/2026/09/Telecommunications-Cybersecurity-and-Resilience-Act-One-Pager-1.pdf

warner.senate.gov

https://www.markey.senate.gov/news/press-releases/as-ai-agents-carry-out-attacks-senator-markey-introduces-legislation-establishing-independent-body-to-investigate-cyber-hacks-assisted-by-artificial-intelligence

markey.senate.gov

https://www.politico.eu/article/german-police-official-jurgen-ebner-selected-to-lead-europol/

politico.eu

https://www.eca.europa.eu/en/news/NEWS-SR-2026-19

eca.europa.eu

https://www.euronews.com/2026/09/22/the-eu-spent-billions-on-a-cyberattack-shield-nobody-checked-if-it-worked

euronews.com

https://therecord.media/uk-disinformation-russia-center

therecord.media

https://www.justice.gov/usao-cdca/pr/tech-ceo-russian-national-arrested-complaint-alleging-they-hid-russian-ownership-and

justice.gov

https://x.com/DrWhax/status/2102709612978016537?ref_src=twsrc%5Etfw

x.com

https://www.vp.gov.lv/lv/jaunums/aizturets-hakeris-par-veiktiem-kiberuzbrukumiem-vismaz-diviem-latvijas-uznemumiem-mantkariga-noluka

vp.gov.lv

https://therecord.media/ransomware-ryuk-sentenced-DOJ

therecord.media

https://www.brooklynda.org/2026/09/23/brooklyn-man-sentenced-to-up-to-12-years-in-prison-for-stealing-nearly-16-million-in-fraudulent-cryptocurrency-scheme/

brooklynda.org

https://www.justice.gov/usao-wdpa/pr/kosovar-national-pleads-guilty-operating-cybercrime-marketplace-offering-tools-and

justice.gov

https://about.fb.com/news/2026/09/meta-spf-scam-efforts/

about.fb.com

https://www.police.gov.sg/Media-Hub/News/2026/09/20260923_enhanced_information_sharing_between_meta_and_the_singapore_police_force

police.gov.sg

https://www.qurium.org/dark-ops-undercovered/sweeptakes-harvesting-personal-data/

qurium.org

https://spur.us/blog/mellowtel-browser-extensions-proxy-network

spur.us

https://www.microsoft.com/en-us/security/blog/2026/09/24/beyond-ransomware-tracking-storm-2570-consistent-tradecraft-across-deployments/

microsoft.com

https://www.proofpoint.com/us/blog/threat-insight/Spraying-in-the-Andes-TeamFiltration-Returns

proofpoint.com

https://alluresecurity.com/blog/signal-noise-brand-was-real-app-wasnt

alluresecurity.com

https://blog.deception.pro/blog/kongtuke-systembc-sep-2026

blog.deception.pro

https://www.d3lab.net/an-italian-phishing-campaign-delivering-an-ios-exploit-chain/

d3lab.net

Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts Read at the source ↗

socket.dev

Novel supplychain.local Go worm appears Read at the source ↗

aikido.dev

https://safedep.io/sckit-go-implant-framework/

safedep.io

https://semgrep.dev/blog/2026/the-ai-ecosystem-has-worms-now-inside-the-memtensor-compromise/

semgrep.dev

https://www.stepsecurity.io/blog/sckit-supply-chain-worm-hits-memtensor-npm-pypi-scopes

stepsecurity.io

https://www.manifold.security/blog/third-party-com-placeholder-clickfix

manifold.security

https://www.sekoia.com/blog/exvicy-a-copycat-of-the-errtraffic-malware-distribution-framework

sekoia.com

https://www.huntress.com/blog/darkme-rat-abandons-exploits

huntress.com

https://www.pointwild.com/threat-intelligence/bothelper-rat-from-encrypted-payload-to-live-screen-surveillance/

pointwild.com

The Psychedelic Stealer: When a CAPTCHA Becomes an Installer Read at the source ↗

arcticwolf.com

https://securelist.com/macsync-new-version/121383/

securelist.com

https://www.threatdown.com/blog/carbonato/

threatdown.com

https://malbearlabs.com/posts/novel-malware-built-to-survive-the-analyst

malbearlabs.com

https://medium.com/@DCSO_CyTec/sauron-loader-a-new-loader-lurking-in-underground-forums-e91fa70db537

medium.com

https://www.group-ib.com/blog/remcontrol-android-banking-trojan/

group-ib.com

https://habr.com/ru/companies/F6/articles/1086012/

habr.com

https://haveibeensquatted.com/blog/inside-corp-mdm-android-spyware-targeting-logisitics

haveibeensquatted.com

https://interseclab.org/research/max/

interseclab.org

https://support.cpanel.net/hc/en-us/sections/360007088193-Security

support.cpanel.net

https://support.forcepoint.com/s/article/Security-Advisory-Security-Policy-Bypass-in-Forcepoint-Security-Engine-NGFW-CVE-2026-12974

support.forcepoint.com

https://docs.github.com/en/enterprise-server@3.22/admin/release-notes

docs.github.com

https://support.hp.com/us-en/security-bulletins

support.hp.com

https://support.hpe.com/connect/s/securitybulletinlibrary?language=en_US

support.hpe.com

https://forum.mikrotik.com/t/7-25beta-development-is-released/272788

forum.mikrotik.com

Next.js Security Update for a Critical Upstream Issue Read at the source ↗

nextjs.org

https://www.nvidia.com/en-us/security/

nvidia.com

https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4

github.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70125

msrc.microsoft.com

https://www.solarwinds.com/trust-center/security-advisories

solarwinds.com

https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx

github.com

https://community.ui.com/releases/Security-Advisory-Bulletin-069-069/07e367a7-edec-4d85-a058-f97e5ce9ac9c

community.ui.com

WordPress 7.1.2 Release Read at the source ↗

wordpress.org

https://previdian.com/CVE-2026-87902

previdian.com

https://www.wordfence.com/blog/2026/09/psa-critical-unauthenticated-path-traversal-vulnerability-patched-in-wordpress-core/

wordfence.com

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp

github.com

https://x.com/PrevidianCyber?ref_src=twsrc%5Etfw

x.com

https://t.co/wjerg34fXr

t.co

https://x.com/ethicalhack3r/status/2102747373873004680?ref_src=twsrc%5Etfw

x.com

https://www.cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-503

cyber.gc.ca

https://ridgesecurity.ai/blog/one-packet-can-take-down-the-database-behind-industrial-operations-ridge-security-discovers-cve-2026-42542/

ridgesecurity.ai

TrustSink: How a Rogue External MFA Provider Steals Passwords Read at the source ↗

varonis.com

https://accomplish.ai/blog/escaping-the-cloudflare-sandbox/

accomplish.ai

How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers Read at the source ↗

blog.cloudflare.com

https://blog.google/security/agentic-hacks-real-proofs-inside-googles-pagebreak-project/

blog.google

Google's PageBreak Project – Real-World Findings Read at the source ↗

bughunters.google.com

https://datadome.co/resources/bot-and-agent-security-report/

datadome.co

https://www.f5.com/labs/articles/2026-state-of-pqc-on-the-web

f5.com

https://news.gallup.com/poll/714593/optimism-globally-widespread-despite-uneven.aspx?utm_source=Securitylab.ru

news.gallup.com

https://www.honeywell.com/us/en/insights/research/2026-ot-security-benchmark

honeywell.com

https://www.nccgroup.com/newsroom/ncc-group-monthly-threat-pulse-review-of-august/

nccgroup.com

How MCP Is Bypassing a Decade of Cloud Security Best Practices Read at the source ↗

ox.security

https://www.rockwellautomation.com/en-us/company/news/press-releases/More-Than-One-Third-of-Industrial-Organizations-See-Cybersecurity-Risk-as-a-Top-Obstacle-to-Growth-New-Global-Study-Finds.html

rockwellautomation.com

https://www.travelers.com/resources/risk-index/2026-cyber-business-risk

travelers.com

https://www.prnewswire.com/news-releases/77-of-cyberattacks-on-distributed-enterprises-spread-to-other-locations-systems-and-vendors-302885124.html

prnewswire.com

https://github.com/patrickmgarrity/Anthropic-Credited-CVEs

github.com

https://www.youtube.com/playlist?list=PLat_Byp_eRs2IRF27U7J6n_dWp_OcrPBU

youtube.com

https://www.youtube.com/playlist?list=PLEtqlXqF22cY

youtube.com

https://www.youtube.com/playlist?list=PLIIlNRsEiwWs

youtube.com