Cybersecurity Threats and Vulnerabilities: Weekly Roundup
In the ever-evolving world of cybersecurity, significant threats and vulnerabilities continue to emerge, highlighting the importance of vigilance and proactive measures. This week’s roundup brings to light major incidents involving cryptocurrency theft, web application vulnerabilities, and the exploitation of critical flaws across various platforms.
Bitget Reports $351.6 Million Stolen by Suspected North Korean Hackers
Cryptocurrency exchange Bitget has reported that suspected North Korean threat actors have compromised its backend systems, resulting in the theft of $351.6 million from its hot and warm wallets. While the incident was detected on September 24, 2026, the exchange stated that its cold wallets and the majority of assets remain secure. Read more.
Active Exploitation of Roundcube Pre-Auth SQL Injection Flaw
The Canadian Centre for Cyber Security has issued a warning regarding a critical pre-authentication SQL injection vulnerability (CVE-2026-48842) in Roundcube Webmail. This flaw has a CVSS score of 8.1 and affects several versions, emphasizing the need for immediate patching as it is currently under active exploitation. Read more.
Cloudflare Addresses Data Leakage Vulnerability
A flaw in Cloudflare Containers allowed one customer to access leftover disk data from other customers’ containers. While the data was not from any active workload, this vulnerability raises concerns about data privacy and security, prompting Cloudflare to implement necessary fixes. Read more.
Critical Flaws in WSO2 and Adobe Commerce Added to CISA KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities affecting WSO2 and Adobe Commerce to its Known Exploited Vulnerabilities (KEV) catalog. These issues, including a path traversal vulnerability with a CVSS score of 9.8, are being actively exploited, underscoring the urgency for organizations to update their systems. Read more.
Unpatched OnePlus Vulnerabilities Allow Root Access through Malicious Apps
A researcher has discovered vulnerabilities in OnePlus devices that enable malicious apps to gain root access without requiring special permissions. This issue affects not only the OnePlus 15 but also many other devices, indicating a widespread problem that could compromise user security. Read more.
Stay informed and secure as new threats continue to emerge in the cybersecurity landscape! 🔒💻 #Cybersecurity #DataBreach #Vulnerability #ThreatHunting #CryptoSecurity