Telecom & Media — Cybersecurity News & Threat Intelligence

14 articlesUpdated 15 Oct 2026

ThreatsCloud & SaaSCritical

NGINX Plus & Open Source HTTP/3 QUIC Stream Use-After-Free Flaw CVE-2026-97205 Remediated

F5 NGINX resolves a critical use-after-free vulnerability in HTTP/3 QUIC stream processing (CVE-2026-97205) allowing worker process termination and code execution.

15 Oct 20268 min read

CST Editorial Desk

ThreatsCloud & SaaSCritical
NGINX Heap Overflow in Regex Map Handling Threatens Worker Processes
F5 NGINX patches critical heap buffer overflow CVE-2026-93479 in ngx_http_core_module where regex map variables lead to worker crash and code execution.
CST Editorial Desk15 Oct 20268 min read
ThreatsCloud & SaaSCritical
ProFTPD mod_copy Flaw Weaponized to Copy Server Files and Execute Code
ProFTPD resolves a critical access control flaw in mod_copy (CVE-2015-3306) where unauthenticated attackers copy arbitrary server files and execute remote code.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSCritical
ISC BIND 9 TKEY Flaw Exploited to Crash Authoritative DNS Servers
ISC resolves a critical assertion failure defect in BIND 9 nameservers (CVE-2015-5477) where a single malformed TKEY query crashes DNS daemons remotely.
CST Editorial Desk13 Oct 20268 min read
Cyber AttackEnergy & Utilities
China-Nexus Warlock Ransomware Crew Breaches Water Utility and Telecom Operator Through Unpatched SharePoint
Longlegs (Storm-2603) used on-prem SharePoint access, a BYOVD EDR killer and SYSVOL replication to push Warlock ransomware to 33+ hosts. IOCs inside.
Mei-Lin Chen4 Oct 20269 min read
NewsCloud & SaaS
Google September 2026 Android Bulletin Patches Critical System Zero-Click RCE Flaws
Google’s September 2026 Android security update resolves 34 vulnerabilities, led by critical zero-click remote code execution defects in the Android System framework.
Mei-Lin Chen14 Sep 20267 min read
ThreatsTelecom & MediaHigh
Cisco Fixes High-Severity Memory Corruption Flaw in Carrier-Grade IOS XR Routing Core
Cisco resolved CVE-2026-20274, an unauthenticated memory corruption flaw in IOS XR software that enables crash-loops or remote code execution in telecommunications cores.
Daniel Okafor14 Sep 20267 min read
ThreatsTelecom & MediaCritical
Chinese state-aligned group UNC3569 exploited zero-day flaw in Sogou Input Method to drop GRAYRABBIT backdoor
A zero-day flaw in Sogou Input Method—used by 455M people monthly—allowed Chinese threat actor UNC3569 to execute arbitrary code and install the GRAYRABBIT backdoor.
Mei-Lin Chen12 Sep 20266 min read
ThreatsTelecom & MediaHigh
Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions
Bitdefender reveals threat actors are exploiting Google Play’s Early Access program to bypass user reviews and star ratings, pushing deceptive apps with over 1M downloads.
Aisha Noor12 Sep 20265 min read
ThreatsIndustrial & OTCritical
MikroTrick exploit chain compromises MikroTik RouterOS devices as ScreenConnect client flaw hits KEV
CERT Polska discloses MikroTrick, an unauthenticated exploit chain hijacking MikroTik RouterOS devices, while CISA adds a dangerous ScreenConnect client condition to KEV.
Daniel Okafor12 Sep 20266 min read
NewsBanking & Fintech
StreamRAT Android banking trojan targeted 570,000 European users through deceptive Meta streaming ads
ThreatFabric uncovers StreamRAT, a sophisticated Android banking trojan promoted via fraudulent Meta TV streaming ads, hijacking Accessibility services to drain accounts.
Aisha Noor12 Sep 20265 min read
ThreatsBanking & FintechHigh
Gigabud Android Banking Trojan Abuses Work Profiles to Evade Client-Side Detection
Group-IB uncovered a major evolution in the Gigabud banking trojan, which uses Android enterprise Work Profiles to isolate tampered banking apps and blind client security checks.
Mei-Lin Chen10 Sep 20265 min read
ResearchTelecom & Media
Salt Typhoon has compromised networks in more than 80 countries, researchers say
The Chinese state-aligned group has moved well beyond telecoms into transportation and government, in what is now one of the broadest espionage campaigns on record.
Daniel Okafor7 Sep 20268 min read
ThreatsTelecom & MediaCritical
Cisco Nexus 9000 Silicon One Switches Exposed to Unauthenticated Root RCE
Cisco disclosed CVE-2026-20212 (CVSS 9.8), an unauthenticated root code execution flaw on Silicon One-based Nexus 9000 datacenter switches due to open debugging ports.
Daniel Okafor3 Sep 20265 min read