Cybersecurity news
that matters to your business.

Trezor warned that a third-party email-provider breach was being used to send fraudulent security alerts to customers, according to BleepingComputer. The company said the messages were phishing attempts and that it was investigating. The messages' claimed wallet vulnerability is part of the lure, not a verified finding.

Trezor warned that a third-party email-provider breach was being used to send fraudulent security alerts to customers, according to BleepingComputer. The company said the messages were phishing attempts and that it was investigating. The messages' claimed wallet vulnerability is part of the lure, not a verified finding.

GreyNoise reports that attackers used two WordPress vulnerabilities against at least 49 organizations and stole more than 18,000 records from an unnamed Western government. It also reports exploitation and data extraction from 996 Zyxel GS1900 switches in 48 countries. The observations come from the firm's sensors and attacker infrastructure; the government victim remains unnamed and state sponsorship is not established.

GreyNoise reports that attackers used two WordPress vulnerabilities against at least 49 organizations and stole more than 18,000 records from an unnamed Western government. It also reports exploitation and data extraction from 996 Zyxel GS1900 switches in 48 countries. The observations come from the firm's sensors and attacker infrastructure; the government victim remains unnamed and state sponsorship is not established.

An update reported by BleepingComputer puts the AdaptHealth breach's affected population at approximately 4.1 million people. The incident involved a compromised contractor account and access to cloud business applications. This is an impact update about an earlier intrusion, not evidence of a new attack in September.

Spain's data protection agency received a report alleging that an AI agent found vulnerabilities, accessed systems, changed personal data and viewed invoices. The agency has not investigated or verified the report, so the incident details remain developing.

Veradigm says credentials obtained from a third-party vendor were used to access a limited customer-service interface and copy patient information. BleepingComputer reports that the company has not identified the attacker and says operations were not disrupted. A ransomware group's separate claims about the volume of stolen records remain unverified.

CISA's September 8 alert adds four exploited vulnerabilities spanning Adobe Commerce and Magento, Microsoft Windows, and N-able N-central. The advisory is a patch-prioritization signal for affected deployments, not a single breach report. One Windows issue also appears in separate reporting on the BlueMoon exploit chain.