57
57
57
45
30
45
57
30
30
60
30
30
57
57
57
Getting a stranger’s phone kicked off the cellular network costs a few dollars
Researchers show attackers can remotely block strangers' phones and alarm gateways on US cellular networks by abusing lost/stolen IMEI reporting for $2.50-$4 per device.
Researchers from Michigan State University and three partner schools found six weaknesses in the lost/stolen device reporting ecosystem spanning devices, carrier systems, and cross-carrier block-list sharing. They demonstrated blocking unopened Samsung Galaxy Z Fold 7 phones and home alarm gateways on three major US carriers, with each block costing $2.50-$4 and taking roughly 20-80 seconds. The attacks exploit thin identity and ownership checks in prepaid accounts, IMEI leakage from vulnerable cellular chipsets used by two vendors with over 40% global market share, and pre-release IMEI databases purchasable for $600. Victims receive no notification, and restoring service requires proving device ownership to the carrier.
55
60
Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
Weekly roundup: Cisco FMC and N-able N-central zero-days exploited in the wild, MikroTik RouterOS hijacks, Microsoft Patch Tuesday ships two exploited zero-days.
State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center (FMC), alongside CVE-2026-20316. N-able issued an emergency hotfix for CVE-2026-86218, a critical pre-auth RCE in the N-central RMM platform exploited in the wild. CERT Polska disclosed six RouterOS vulnerabilities being chained to hijack internet-exposed MikroTik devices. Microsoft's September 2026 Patch Tuesday shipped a record patch count including two zero-days, while roughly 67,000 Trezor customers faced phishing after a shipping-partner breach and researchers privately disclosed a zero-click WeChat worm to Tencent.
70
30
57
30
55
42
55
60
60
55
57
57
57
57
57
57
57
‘We Did Not Invite You.’ Citizens Rage at Town Hall Over Proposed Nuclear AI Data Center
University of Michigan and Los Alamos faced resident backlash over a proposed $1.2 billion hyperscale data center in Ypsilanti Township, Michigan.
The University of Michigan partnered with Los Alamos National Laboratory on a proposed $1.2 billion, 220,000-square-foot hyperscale data center in Ypsilanti Township. Residents at a Wednesday town hall raised concerns about electricity costs, water usage, noise, and the facility's role in nuclear weapons research. Officials noted the project is far smaller than the nearby $56 billion, 1.4-gigawatt OpenAI data center in Saline Township. Los Alamos said no plutonium or weapons production would occur on site, though the facility would support nuclear stockpile modeling.
22
60
University of Texas forced to take systems offline in San Antonio after cyberattack
University of Texas at San Antonio took phones and other systems offline after detecting threat activity, with no evidence of data theft.
The University of Texas at San Antonio, which serves 40,000 students across six campuses, detected threat activity at the edge of its academic network over the weekend and took systems including phones offline. Its CTO said the activity was contained before reaching core systems and that the investigation found no evidence of data access or exfiltration. Mandatory password resets for students and teachers were ordered but delayed, and the student payment deadline was extended to Friday as classes begin Wednesday. No hacking group has claimed credit, and universities are frequently targeted around academic calendar transitions.
50
60
30
30