@NcuIsao

We help Credit Unions reduce their security and fraud risk through information sharing and collaboration.

 Highlands Ranch, CO
ncuisao.org
Joined January 2018
  • Tweets6.4K
  • Following571
  • Followers313
3.1KMedia
Update: Microsoft has removed seven certificates associated with the affected eMudhra hierarchies from the Microsoft Edge trust list, following their removal from the Windows trust list. We’ve updated our guidance with additional information on these protections and what customers should consider when managing trust locally. Read the latest in our blog: msft.it/6014aLxJw

Microsoft’s response to compromised eMudhra certificate authority keys

microsoft.com
5
57
211
14,794
CISA has confirmed that hackers are actively exploiting a critical Brotli vulnerability (CVE-2026-111497), also known as Node2Shell, Broccoli2Shell, and HTTP2Shell. bleepingcomputer.com/news/se…

CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and...

bleepingcomputer.com
8
26
2
88
7,436
NCU-ISAO retweeted
CISA Cyber
@CISACyberOct 26
We added #PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to our Known Exploited Vulnerabilities Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org. #Cybersecurity #InfoSec #RCE
Image showing the CISA logo and text: "Known Exploited Vulnerabilities Catalog" with "Updated" labeled prominently. Website: cisa.gov.

ALT Image showing the CISA logo and text: "Known Exploited Vulnerabilities Catalog" with "Updated" labeled prominently. Website: cisa.gov.

16
80
11
209
19,979
NCU-ISAO retweeted
The NCUA
@TheNCUA22h
NCUA released its staff draft budget for 2027–2028 today. The proposed budget is now available on the agency’s website and has been submitted for publication in the Federal Register. Public comments are encouraged. To learn more, please visit: go.ncua.gov/3Wz2Jq5

NCUA Releases 2027–2028 Proposed Budget, Sets November 17 Public Hearing

The National Credit Union Administration (NCUA) released its staff draft budget for 2027–2028 today.

ncua.gov
1
1
229
Microsoft releases Windows OOB updates to distrust eMudhra certificates bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Microsoft releases Windows OOB updates to distrust eMudhra certificates

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic...

bleepingcomputer.com
5
38
130
14,952
‼️WARNING - Hundreds of millions of devices run GoAhead's embedded web server. Now, 3 TLS vulnerabilities have been disclosed that can allow revoked client certificates to authenticate or expose encrypted sessions to decryption. Affected builds use specific OpenSSL, LibreSSL, or Mbed TLS configurations. Read more: thehackernews.com/2026/10/go…
14
34
1
185
33,324
🚨 CISA adds two PHP2Shell bugs to its KEV catalog after confirming active exploitation. CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution on affected PHP deployments. Read ↓ thehackernews.com/2026/10/ci…

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a single-worker mod_php setup.

thehackernews.com
26
63
3
233
41,224
AI coding agents hijacked using AGENTS.md file in Downloads folder bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

AI coding agents hijacked using AGENTS.md file in Downloads folder

Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.

bleepingcomputer.com
58
21
25
96
16,844
🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic. • .NET: patched by Microsoft • FFmpeg: hit via a crafted JPEG XL image • ClickHouse: one request crashes it, fix not yet released • Apache Arrow: no fix yet Details ↓ thehackernews.com/2026/10/br…
35
181
24
859
86,869
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details → thehackernews.com/2026/10/ur…
224
2,236
791
7,324
1,461,505
PHP ships emergency patches for critical PHP2Shell flaws bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.

bleepingcomputer.com
12
62
2
139
12,679
‼️ URGENT ‼️ Two CRITICAL, unpatched PHP flaws (CVSS 9.2 each) have triggered an emergency warning after alleged exploit details surfaced online. Researchers report potential RCE. CVE-2026-109618 and CVE-2026-109619. Fixes scheduled for October 21, 14:00 UTC. Details - thehackernews.com/2026/10/ph…
29
193
28
768
97,930
NCU-ISAO retweeted
The NCUA
@TheNCUAOct 20
Today NCUA announced its thirteenth round of proposed rule changes for the Deregulation Project. To learn more, please visit: go.ncua.gov/4yUBWCR

NCUA Announces Thirteenth Round of Deregulation Proposals

The National Credit Union Administration today announced the thirteenth round of proposed regulatory changes associated with NCUA’s Deregulation Project.

ncua.gov
1
4
7
490
F5 releases out-of-band patches for critical NGINX vulnerabilities bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.

bleepingcomputer.com
4
44
1
118
19,645
‼️ BREAKING: Go has issued an URGENT security update blocking 8 certificate authority keys over undisclosed security concerns. It will reject certificate chains using these keys, potentially breaking connections for rebuilt applications. The filter cannot be disabled. Here's what we know: thehackernews.com/2026/10/go…
27
109
28
465
188,006
🚨 Palo Alto Networks patches actively exploited PAN-OS RCE flaw (CVE-2026-0322). Authenticated attackers with network access to the management interface can run code as root. Palo Alto reports "very limited" exploitation. CISA added it to KEV. Read - thehackernews.com/2026/10/pa…

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks patched an exploited PAN-OS flaw that lets authenticated attackers with management interface access execute code as root.

thehackernews.com
16
31
106
20,814
‼️ WARNING - Cisco confirms active, in-the-wild exploitation of a new critical flaw (CVE-2026-76519 // CVSS 9.8) in Cisco Secure Email Gateway. Unauthenticated attackers can achieve full root command execution simply by sending an email with a crafted attachment. Details >> thehackernews.com/2026/10/ci…
15
70
8
239
52,350
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide. msft.it/6014asXPO

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime |...

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling...

microsoft.com
7
40
5
119
15,913
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.

bleepingcomputer.com
2
13
30
8,569
Ivanti warns of Connect Secure zero-day exploited in attacks bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.

bleepingcomputer.com
5
20
3
74
11,058
Load more