DEV Community: BeyondMachines

ShinyHunters Claims to Have Stolen Over 200,000 Records from Florida DAVID Database

BeyondMachines — Wed, 09 Sep 2026 11:01:13 +0000

Summary

ShinyHunters claims to have breached Florida’s DAVID driver database through a password-reset flaw and stolen more than 200,000 records. The group published an alleged driver record as evidence, although FLHSMV has not publicly confirmed the breach or the attackers’ claims.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Longview ER Operations Discloses Data Breach Following Unauthorized Network Access

BeyondMachines — Wed, 09 Sep 2026 10:01:14 +0000

Summary

Longview ER Operations LLC, operating as Hospitality Health ER, disclosed a data breach after an unauthorized actor accessed its network and copied files that may contain protected health information. The Genesis ransomware group claimed responsibility for the attack. Longview plans to notify individuals whose information is identified in the affected files.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Microsoft Patches 966 Vulnerabilities in September 2026 Update Including Two Actively Exploited Zero-Days

BeyondMachines — Wed, 09 Sep 2026 09:01:14 +0000

Summary

Microsoft's September 2026 Patch Tuesday fixed 966 flaws, its largest ever. The patch package includes 105 critical bugs and two actively exploited zero-days (CVE-2026-81963 and CVE-2026-85880). The critical flaws cluster in Windows network services (DNS, DHCP, RRAS, Netlogon), Office file parsing, imaging/graphics components, and Azure/Entra cloud services. Microsoft is attributing the surge in volume to AI-assisted vulnerability discovery.

Take Action:

Patch the Windows OS first for the two zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in ALPC, both already exploited in attacks to gain SYSTEM privileges. Next, patch internet-reachable and domain-joined Windows servers: DNS, DHCP, RRAS, Netlogon, Kerberos and the Key Distribution Center, Services for NFS, Deployment Services, Failover Cluster and SSTP all carry critical remote code execution flaws. Then move through Outlook, Word, Excel, and Office, followed by SQL Server, SharePoint Server, and Exchange. Windows Hello, Secure Kernel Mode, Credential Guard, and VBS should follow for anything holding credentials or running as a security boundary. Everything else can follow in the normal cycle, but plan for it to take longer than usual: almost no organization can test and deploy this volume in a single window.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Stadtwerke Landsberg KU Hit by Ransomware Attack Encrypting Central IT Systems

BeyondMachines — Wed, 09 Sep 2026 08:01:13 +0000

Summary

Stadtwerke Landsberg KU, a Bavarian municipal utility, suffered a ransomware attack on September 1, 2026, that encrypted central IT systems and potentially exposed customer bank details. The utility isolated its network and is working with forensic specialists to restore office systems. Critical electricity and water services are fully functional.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Adobe releases September 2026 patches for multiple products

BeyondMachines — Tue, 08 Sep 2026 20:01:13 +0000

Summary

Adobe's September 2026 security updates patch vulnerabilities across eight product families: Commerce/Magento, ColdFusion, Campaign Classic, Acrobat/Reader, Experience Manager, Photoshop, Illustrator, and Animate. The flaws could allow arbitrary code execution, privilege escalation, security feature bypass, file system read/write, memory exposure, and denial-of-service. The most urgent is CVE-2026-75650 (CVSS 10.0) in Adobe Commerce and Magento Open Source, an unauthenticated template-engine flaw already exploited in the wild and fixed by a separate out-of-band hotfix on September 7 that must be applied in addition to the September update.

Take Action:

If you run Adobe Commerce or Magento Open Source, apply the out-of-band hotfix for CVE-2026-75650 immediately! Adobe is aware of this flaw being exploited in the wild, it carries a CVSS score of 10.0, and it can be triggered without authentication. Next, update ColdFusion and Adobe Campaign Classic, both of which received Adobe's highest priority rating and contain critical flaws that could lead to arbitrary code execution. Then apply the September Adobe Commerce security update, which is separate from the hotfix and must be installed in addition to it. After that, update Adobe Experience Manager and Acrobat and Reader. Finally, update Photoshop, Illustrator, and Animate. If you can't update right away, restrict network access to Commerce, ColdFusion, Campaign Classic, and Experience Manager servers, and avoid opening untrusted PDFs and untrusted image or project files in Acrobat, Reader, Photoshop, Illustrator, and Animate until patches are applied.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

PAMCAH-UA Local 675 Email Data Breach Affects More Than 8,000 Individuals

BeyondMachines — Tue, 08 Sep 2026 19:01:13 +0000

Summary

PAMCAH-UA Local 675 disclosed a data breach after an unauthorized party accessed employee email accounts and potentially acquired sensitive personal, medical, and financial information. The incident affected more than 8,000 individuals, and PAMCAH is notifying those impacted while working with forensic cybersecurity specialists.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Indico Data Solutions Discloses Data Breach Affecting More Than 4,000 Individuals

BeyondMachines — Tue, 08 Sep 2026 18:01:14 +0000

Summary

Indico Data Solutions disclosed a data breach involving unauthorized access to online repositories containing customer information. The exposed data may include names, addresses, Social Security numbers, financial account information, and medical and health insurance information. The company is offering affected individuals complimentary credit monitoring and identity protection services through Cyberscout.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

SAP September 2026 Security Update Fixes Critical Memory Corruption and Authentication Flaws

BeyondMachines — Tue, 08 Sep 2026 17:01:13 +0000

Summary

SAP released 20 security notes for September 2026, addressing four critical vulnerabilities including a CVSS 10.0 memory corruption flaw in Extended Passport Processing and a CVSS 9.8 authentication bypass in NetWeaver Message Server.

Take Action:

If you run SAP applications time to patch. Prioritize the critical fixes for Extended Passport/Web Dispatcher, the NetWeaver Message Server, the CAP sap/cds-mtxs credential leak, and SAP GUI for Java. Then go through the rest of the list. Until patching is complete, make sure the Web Dispatcher, Message Server and other SAP components are not reachable from the internet and are only accessible from trusted internal networks. Don't forget to also apply the updated note for ABAP Developer Tools.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Settra Ransomware Group Claims 100GB Data Breach of Verve Portraits

BeyondMachines — Tue, 08 Sep 2026 16:01:14 +0000

Summary

Verve Portraits is investigating a data breach after the Settra ransomware group claimed it stole more than 100GB of data, including thousands of photos and employee information. Settra claims the data involves more than 5,000 clients and 50 employees and contractors, but Verve Portraits has not confirmed the total number of affected individuals..

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Storm Ransomware Group Claims Macquarrie Corporation Breach Following Third-Party Compromise

BeyondMachines — Tue, 08 Sep 2026 14:01:14 +0000

Summary

Macquarrie Corporation confirmed a data breach involving an external technology provider after Storm ransomware group claimed responsibility. Exposed information includes employee, customer, and company records, and affected individuals are being notified.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Luminis Health Disrupts Systems Following Cybersecurity Incident

BeyondMachines — Tue, 08 Sep 2026 13:01:14 +0000

Summary

Luminis Health, a Maryland-based nonprofit health system, took critical systems offline including patient portals and phone lines following a cybersecurity incident in September 2026. The organization is working with third-party experts to investigate the scope of the breach and restore services.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Hacktivist Group Claims Month-Long Access to Philippines Migrant Workers Network

BeyondMachines — Tue, 08 Sep 2026 12:01:14 +0000

Summary

The Philippines Department of Information and Communications Technology is investigating a network intrusion at the Department of Migrant Workers after the hacktivist group HappyGoLuckyPH claimed to have compromised a domain controller and maintained access for over a month.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines