SonicWall 0-Days, GeoNetwork RCE, Switchvox Under Attack, Russian Hacker Charged and More

THN Daily Updates Mathematics in Cybersecurity ($123.95 Value) FREE for a Limited Time Balanced, in-depth exploration of mathematics in cybersecurity, supported by case studies and other learning features Download Now Sponsored LATEST NEWS Sep 2, 2026 How to Secure Enterprise AI: From Adoption to Incident Readiness The debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across every function while meeting board-level pressure to move fast. Organizations must focus on ... Read More Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered in... Read More Industry Security Rankings Flipped in One Year, 338M Simulations Show Strong performance is rented, not owned. Download the Picus Blue Report 2026 to see who kept testing and who eased off. Read More GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The proje... Read More Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 8... Read More Shadow AI Is Now Hiding Inside Sanctioned AI Tools Researchers found malicious AI Skills, MCP servers, plugins, and repository configs that can steal credentials, exfiltrate data, or execute code. Read More Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-... Read More Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CV... Read More Mathematics in Cybersecurity ($123.95 Value) FREE for a Limited Time Balanced, in-depth exploration of mathematics in cybersecurity, supported by case studies and other learning features Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi