Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services.…
Category: Cyber Security News
OpenAI AI Agents Bypass Security Isolation, Exploiting 0-Days in Red-Teaming Tests
OpenAI says its AI agents found zero-day flaws, escaped sandboxes, reached the live internet, and exchanged information across isolation boundaries during…
WhatsApp May Stop Working Without Registered SIM Under New Rules
WhatsApp users in India may face access issues without a registered SIM under new government rules expected to take effect on January 1, 2027. Messaging…
Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands
Okta has disclosed a critical security flaw in Okta Access Gateway that lets an authenticated administrator run system commands through the appliance’s…
StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs
The seller behind StealC has returned with Stadia, a Windows remote access trojan that combines password theft with hidden desktop control. Advertised on…
Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware
Public proof-of-concept code for two critical PHP vulnerabilities is now available, and attackers have tried to use the flaws to deploy botnet malware.…
Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed
Capcom has announced plans to notify customers after unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. The Japanese game…
HPE Warns Critical Aruba Networking Flaws Could Let Hackers Take Complete Control of Devices
Hewlett Packard Enterprise has released security patches for multiple vulnerabilities in Aruba Networking wireless software that could let attackers take…
Hackers Actively Exploiting Critical VeloCloud Orchestrator Flaw to Gain Superuser Access
Hackers are actively exploiting a critical SQL injection flaw in VeloCloud Orchestrator (VCO) that allows logged-in users to gain superuser operator…
New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data
Researchers has demonstrated Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted,…
Multiple Waves of DDoS Attacks Caused This Week’s Outage in North Korea
Multiple waves of DDoS attacks disrupted North Korea’s public internet services this week, knocking major state websites offline. Kentik’s internet…
Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems
A new UEFI bootkit called BlackX has been used in cyberespionage attacks against diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan. The…
SBI Notifies Customers Impacted by the Recent Cyber Incident
State Bank of India (SBI) has individually notified customers whose information was identified in a recent cyber incident, sending alerts through email…
Top 10 Best Email Encryption Services in 2026 [Ranked & Scored]
Email encryption has a usability paradox: the strongest cryptography loses to the recipient who gives up at the portal login and asks for the file “some…
Hacker With Limited Skills Used DeepSeek AI to Breach Indian University and Steal Over 5,200 Records
A cybercriminal using the online handle BUGSTER used artificial intelligence tools to support attacks on Indian organizations, including two universities.…
Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware
A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver malware.…
Top 9 Best Managed File Transfer (MFT) Solutions in 2026 [Ranked & Scored]
No category has been breached more publicly this decade than managed file transfer mass-exploitation campaigns against MFT products turned quiet…
Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability
Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital…
PwC Data Breach Claim – Everest Ransomware Group Claims to Have Stolen 590 GB of Data
The Everest ransomware group claims to have stolen 590.69 GB of data from PwC, the global professional services firm. This alleged data theft includes…
Splunk Fixes 24 Security Flaws, Including Four Critical Vulnerabilities in Enterprise and SOAR
Splunk has released security updates for 24 vulnerabilities in Splunk Enterprise and Splunk SOAR, including four critical flaws with CVSS scores from 9.3…