TECH-BEE · CATEGORY
Cybersecurity
Tech-Bee articles on Cybersecurity — researched from primary sources, every claim checked before publication.
Critical PHP Vulnerabilities Allow Remote Code Execution
Two critical vulnerabilities in PHP enable unauthenticated remote code execution, affecting web applications globally.
Read →BeyondTrust Fixes Zero-Day Exploited Since August
BeyondTrust patches a zero-day vulnerability actively exploited in cyberattacks since August 2026, affecting multiple organizations.
Read →Cisco Warns of Critical Email Gateway Bug Exploited
Cisco alerts about a severe vulnerability in Secure Email Gateway exploited by attackers, rated CVSS 9.8.
Read →iRhythm data breach exposes 360,000 cardiac patients
iRhythm disclosed in October that a June breach of third-party apps exposed health and billing data for at least 360,000 cardiac-monitor patients.
Read →A fake push notification outed ASOS's real data breach
Hackers who tricked an ASOS employee into giving up account access used it to blast a breach confession through ASOS's own app to millions.
Read →FBI seizes the hacking tools behind China's Flax Typhoon
The FBI and DOJ seized domains behind MicroScan and FishHub, scanning and phishing tools a sanctioned Chinese firm built for state-linked hackers.
Read →Georgia Power breach exposes 400,000 customer accounts
A breach of Southern Company's online customer portal exposed names, addresses and partial Social Security numbers for 400,000 utility customers.
Read →Oracle Health's Cerner breach hit 20 million patients
A Texas filing shows Oracle Health's 2025 breach of old Cerner servers exposed records on nearly 20 million people, far more than first disclosed.
Read →543,699 live credentials found sitting in public GitHub code
A Truffle Security scan of 224 million GitHub repos found 543,699 still-valid credentials — most of them years old, because nobody ever revoked them.
Read →Times Car breach exposed 6.6 million driver's license records
Japan's Times Car confirmed attackers accessed 6.6 million accounts, including 1.6 million driver's license images used for identity verification.
Read →Bitget's $387M heist traces to a security vendor's zero-day
A zero-day in a third-party security appliance let attackers drain $387.5 million from Bitget's hot wallets before controls caught it.
Read →No login needed: the FortiMail flaw under active attack
CVE-2026-104286 lets an unauthenticated attacker write files to FortiMail's management interface, and Fortinet shipped no patch at disclosure.
Read →Citrix NetScaler zero-days were exploited for weeks unnoticed
Two unauthenticated RCE flaws in Citrix NetScaler were exploited for weeks before patches shipped on September 27, 2026.
Read →Pentagon personnel office let a breach run nine months unnoticed
A file-sharing flaw at the Defense Manpower Data Center exposed unencrypted SSNs for roughly 3 million people over nine months.
Read →Sangoma Switchvox flaw lets hackers root VoIP phone servers
Sangoma patched CVE-2026-9586 in July; attackers found it in August, using unauthenticated SQL injection to gain root on Switchvox VoIP servers.
Read →Thomson Reuters' C-Track breach exposed US, Canada court data
A months-long breach of Thomson Reuters' C-Track exposed Social Security numbers and sealed court filings across a dozen US states and Canada.
Read →SonicWall's SMA1000 zero-days: SSRF chains into full RCE
SonicWall patched two exploited SMA1000 zero-days on Sept 1, 2026: a maximum-severity SSRF chained with OS command injection for remote code execution.
Read →How a ten-minute phone call shut down MGM Resorts
In September 2023, attackers talked their way past the MGM help desk, turned one stolen login into control of the company's identity provider, and encrypted more than a hundred ESXi hosts. Casinos ran on paper for ten days.
Read →The SharePoint bug that let anyone become admin: a token with no signature
CVE-2026-55040 let an unauthenticated attacker impersonate any SharePoint user by presenting a JWT with alg set to none. Researchers found it with an AI agent, Microsoft patched it in July, and attackers were exploiting it within a month.
Read →