📰 DAILY THREAT BRIEFING
Saturday, October 3, 2026
12 News Items
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of October 3, 2026.

  1. Google Gemini could soon get full access to your Mac’s files, apps and the web
    — Bleeping Computer

    Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permissio…
  2. ShinyHunters hacker reportedly detained in Jordan, aiding FBI
    — Bleeping Computer

    A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI t…
  3. YARA-X 1.21.0 Release, (Sat, Oct 3rd)
    — SANS ISC

    YARA-X's 1.21.0 release brings 5 improvements and 4 bugfixes.
  4. MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
    — The Hacker News

    The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gather…
  5. Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
    — The Hacker News

    The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both …
  6. Danish university DTU breach exposes data of up to 200,000 people
    — Bleeping Computer

    The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its…
  7. The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
    — The Hacker News

    Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digit…
  8. RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
    — Dark Reading

    The offensive cyber operations startup looks to evolve red teaming beyond traditional methods to simulate attackers' increasingly advanced c…
  9. Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
    — Dark Reading

    One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported at…
  10. SWIFT Banking & Government Middleware Enables RCE
    — Dark Reading

    Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
  11. ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
  12. ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)
    — SANS ISC

    Threat Actors do not always use top-notch techniques or very complex malware to perform their attacks. Sometimes, they just abuse of existin…

🪲 NVD — Last 20 Scored Vulnerabilities

Latest scored CVEs from the National Vulnerability Database (14827 in last 30 days).
Critical: 0 · High: 6 · Medium: 12 · Low: 2. View full dashboard →

  1. CVE-2026-105130
    — CVSS 3.7 (LOW)

    LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many c…
  2. CVE-2026-105129
    — CVSS 6.5 (MEDIUM)

    LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to read stored secrets through the settings API. Attackers can query GET /ap…
  3. CVE-2026-105128
    — CVSS 5.4 (MEDIUM)

    LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirect_url parameter to EmailTemplateController builder and builderEdit. Att…
  4. CVE-2026-105127
    — CVSS 5.3 (MEDIUM)

    LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers…
  5. CVE-2026-105126
    — CVSS 7.2 (HIGH)

    LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their r…
  6. CVE-2026-105125
    — CVSS 3.7 (LOW)

    LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the {lang} route segment. On Windows hosts, attackers can send URL-encoded backs…
  7. CVE-2026-105124
    — CVSS 6.1 (MEDIUM)

    W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the login user field and visitor comment website field. Attackers c…
  8. CVE-2026-105123
    — CVSS 8.8 (HIGH)

    W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/[*:path]. Att…
  9. CVE-2026-96451
    — CVSS 8.8 (HIGH)

    Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
  10. CVE-2026-103342
    — CVSS 7.1 (HIGH)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…
  11. CVE-2026-103065
    — CVSS 8.2 (HIGH)

    Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.
  12. CVE-2026-105122
    — CVSS 5.4 (MEDIUM)

    OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwks_uri. Attackers …
  13. CVE-2026-105121
    — CVSS 4.9 (MEDIUM)

    OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts h…
  14. CVE-2026-105120
    — CVSS 4.9 (MEDIUM)

    OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that allows realm administrators to list sessions of every realm. Attackers holding delegated RealmAdmin p…
  15. CVE-2026-105119
    — CVSS 6.8 (MEDIUM)

    OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exactly code, so codes issued through OpenID Connect hybrid flows (code token, code id_token, code t…
  16. CVE-2026-105118
    — CVSS 4.7 (MEDIUM)

    OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified id_token_hint to the /oauth2/connect/endSession endpoint. Attackers can name…
  17. CVE-2026-105117
    — CVSS 6.1 (MEDIUM)

    OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control notification email wording via the forgotPassword and register actions on /json/{realm}/users. Attac…
  18. CVE-2026-105116
    — CVSS 6.1 (MEDIUM)

    OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRed…
  19. CVE-2026-105115
    — CVSS 8.6 (HIGH)

    OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SO…
  20. CVE-2026-105114
    — CVSS 6.1 (MEDIUM)

    OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencoded on the OAuth2 authorization error pag…

Source: NVD CVE API 2.0

Generated by CryptXNet.ai Threat Intelligence Platform · October 3, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com