VulnHub

A vulnerability has been identified in the CareCam Pro IP Cameras, specifically affecting the ANJIA AJL33PC0801 model. This vulnerability, designated as CVE-2026-85083, arises from the use of hard-coded credentials for bootloader authentication. Attackers with physical access to the camera can exploit this weakness to gain privileged access, potentially allowing them to modify firmware and configurations, resulting in full control of the device. The issue has been noted as a medium severity threat with a CVSS score of 6.8. Users are advised to take precautions, as CareCam has not yet responded to the Cybersecurity and Infrastructure Security Agency (CISA) regarding remediation efforts.

The Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating that these flaws are actively being exploited in the wild. The vulnerabilities include CVE-2026-75650 affecting Adobe Commerce and Magento, CVE-2026-81963 and CVE-2026-85880 impacting Microsoft Windows, and CVE-2026-86218 concerning N-able N-central. These vulnerabilities are particularly concerning for federal agencies, as they could allow attackers to gain total control over compromised systems. CISA's Binding Operational Directive 26-04 emphasizes the need for federal agencies to promptly address high-risk vulnerabilities, and while it specifically applies to federal entities, CISA encourages all organizations to adopt similar practices for managing and mitigating risks associated with these vulnerabilities.

A group of cybercriminals appears to be targeting Brazilian government and educational websites to set up a network of phishing sites disguised as gambling platforms. By compromising these official sites, they create a reverse-proxy network that misleads users into thinking they are visiting legitimate pages. This incident raises concerns about the security of government infrastructure and the potential for widespread phishing attacks that could affect unsuspecting users. The implications are serious, as these phishing sites could steal personal information and financial data from users who fall victim to the deception. Authorities may need to enhance their cybersecurity measures to prevent further exploitation of their systems.

Researchers from the security firm Calif have demonstrated a new worm that can take over WeChat accounts through incoming calls, without the recipient needing to answer or interact with their phone. This attack requires that the caller is already in the victim's WeChat contacts. Calif tested the worm on three different phones, successfully showing how it propagates. The company reported this vulnerability to Tencent, the owner of WeChat, in July 2023. This type of attack raises significant concerns for users, as it exploits a common communication method and could potentially compromise personal information or lead to unauthorized access to accounts.

MikroTik has issued patches to address serious vulnerabilities in their routers, collectively referred to as MikroTrick. These flaws allow attackers to bypass authentication and overwrite configuration files, potentially enabling them to take complete control of affected devices. The vulnerabilities can impact various MikroTik router models, posing risks for users who rely on these devices for internet connectivity. This situation underscores the need for users to apply the latest security updates promptly to protect their networks from unauthorized access. Ensuring that devices are updated not only safeguards individual users but also helps maintain the overall security of the internet infrastructure.

N-able has released a patch for a serious zero-day vulnerability in its N-central software, which is used for remote monitoring and management. Administrators are being urged to review their systems for any unfamiliar user accounts that may have been created due to this vulnerability. This issue is particularly concerning because it could allow unauthorized access to sensitive data or systems. It's crucial for organizations using N-central to apply the patch promptly to safeguard their environments against potential exploitation. Ignoring this could lead to significant security risks, including data breaches and loss of control over networked devices.

In July, a series of cyber intrusions targeted water control systems that were connected via cellular links, which typical city network scans would not detect. This situation raises concerns about the security and ownership of critical infrastructure networks, as no single entity appears to fully oversee these systems. Utilities are now faced with decisions regarding ownership and funding for necessary fixes, a challenge compounded by existing fiscal constraints. The implications of these intrusions are significant, as they expose vulnerabilities in essential services that could impact public health and safety. Addressing these issues will require collaboration and investment from local governments and utility companies.

CloudSEK has discovered a new phishing-as-a-service campaign known as BigBear 2.0, which has successfully stolen over 5,000 Microsoft 365 credentials. This operation primarily targets users of Microsoft 365, putting their accounts and sensitive information at risk. The attack leverages deceptive tactics to trick users into providing their login details, which can lead to unauthorized access to corporate and personal accounts. As phishing campaigns continue to evolve, it is crucial for organizations and individuals to remain vigilant and implement strong security measures to protect against these types of attacks. Users are advised to enable multi-factor authentication and be cautious of suspicious links and emails.

Adobe has issued urgent security patches for a serious vulnerability affecting Adobe Commerce and Magento Open Source, identified as CVE-2026-75650. This flaw has a maximum severity rating of 10.0 and has been actively exploited since September 4, 2026. Known as StyleSmuggler, the vulnerability allows attackers to deploy a Rust backdoor and a PHP web shell, posing significant risks to users of these platforms. Companies running affected versions need to apply the patches promptly to protect their systems from potential breaches. Failure to address this vulnerability could lead to unauthorized access and data compromise.

A recent investigation has revealed a significant SEO poisoning campaign known as BengalSEO, which has been running since at least 2015 from Rajasthan, India. This operation, attributed to two IT service providers, aims to manipulate search engine results to promote malware and tech support scams. Researchers found that attackers are using deceptive SEO techniques to redirect users to malicious sites, where they can be exposed to harmful software or fraudulent tech support offers. This campaign poses a real risk to internet users, as it can lead to financial loss and data compromise. Companies and individuals should be cautious when clicking on search results and verify the legitimacy of tech support services to avoid falling victim to these scams.