Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

The Hacker News - Sep 30, 2026

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. It carries a

Read full article

MORE NEWS

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Sep 30, 2026

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat under developers' personal accounts

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

Sep 30, 2026

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, fraud

Why NASA scientists believe Scotland holds clues to Mars' ancient past

Sep 30, 2026

Why NASA scientists believe Scotland holds clues to Mars' ancient past

Why NASA scientists believe Scotland holds clues to Mars’ ancient pastNASA scientists, Goddard Instrument Field Team and collaborators travelled to the Scottish Highlands to find major clues regarding Mars' ancient past. According to scientists, Scotland's rocks are significant to unravel...

Air Canada, Virgin Australia and SAS to compete in ‘Battle of the Airline Apps’ at WAF 2026

Sep 30, 2026

Air Canada, Virgin Australia and SAS to compete in ‘Battle of the Airline Apps’ at WAF 2026

Air Canada, Virgin Australia and Scandinavian Airlines (SAS) have been named finalists in the World Aviation Festival’s Battle of the Airline Apps competition, set to take place during WAF 2026 from 13-15 October in Lisbon. The competition, which spotlights innovation in airline mobile technology, will challenge carriers to showcase how their apps are transforming the passenger journey – from booking and check-in to in-flight engagement and post-travel loyalty.

How to Listen to Your Favorite Music, Online or Off the Grid

Sep 30, 2026

How to Listen to Your Favorite Music, Online or Off the Grid

Streaming services can introduce you to a wonderland of nearly unlimited audio, but downloading your digital collection has advantages.

How Meta Uses A.I. Data Centers to Avoid Billions in Federal Taxes

Sep 30, 2026

How Meta Uses A.I. Data Centers to Avoid Billions in Federal Taxes

Meta is exploiting a lucrative tax break intended to support research and experimentation. Its own accountants say the gambit is risky.

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Sep 30, 2026

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional

Ultra-fast free Wi-Fi powered by Starlink is now available on Aer Lingus flights

Sep 30, 2026

Ultra-fast free Wi-Fi powered by Starlink is now available on Aer Lingus flights

Aer Lingus has installed ultra-fast free Wi-Fi powered by Starlink across its entire narrow body transatlantic fleet. This means customers flying to more than 10 North American destinations can stream movies and TV shows and stay connected with family and friends at 35,000 feet. While Aer Lingus is synonymous with flights to Ireland, the airline also serves an extensive network of destinations across North America, giving UK customers easy access to major cities in the US, via Dublin. Customers travelling with Aer Lingus to destinations including Newark, Washington D.C., Philadelphia, Pittsburgh, Cleveland, Nashville, Indianapolis, Hartford Connecticut, Raleigh-Durham, can now enjoy seamless connectivity all throughout their journeys.

Magipic AI Named One of 10 AI Companies to Demo Live at IBTM World 2026

Sep 30, 2026

Magipic AI Named One of 10 AI Companies to Demo Live at IBTM World 2026

Magipic AI, the AI event experience and lead attraction platform for expos and events, is one of 10 companies selected to demo live on stage at the AI for Events Demo Day at IBTM World in Barcelona on Tuesday 17 November 2026, from 10:30 to 10:50 on the Future Stage. From just one selfie, Magipic AI gives guests a branded AI experience, including video, magazine cover, calendar or comic, in seconds, and captures a verified, segmented lead. At Microsoft for Startups’ stand in Athens earlier this year, the platform generated 300 qualified leads in 12 hours, with 98% lead form completion on the booth iPad.

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

Sep 30, 2026

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash can happen when such a resend starts while a larger handshake message is stuck part-way

Hong Kong’s IPO haul in first 9 months smashes record despite Nasdaq’s fundraising lead

Sep 30, 2026

Hong Kong’s IPO haul in first 9 months smashes record despite Nasdaq’s fundraising lead

Funds raised through Hong Kong initial public offerings (IPOs) doubled in the first nine months of 2026, reaching the highest level for the period since records began in 1980. A total of 112 companies raised US$48.4 billion on Hong Kong’s main board during the first nine months, according to data released by LSEG Data & Analytics on Wednesday. A further two companies listed on the city’s Growth Enterprise Market (GEM). By deal count, the combined total of 114 new listings on the main board and...

iPhone Duo yield stuck at 60%: Apple's foldable faces production delays ahead of Oct 23 launch

Sep 30, 2026

iPhone Duo yield stuck at 60%: Apple's foldable faces production delays ahead of Oct 23 launch

Apple's iPhone Duo is reportedly facing production challenges ahead of its October 23 launch, with Foxconn's final assembly yield reportedly just above 60%. Supply chain issues with foldable OLED panels and hinge components could limit initial availability.

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.