Samsung and Vizio smart TVs kept sending traffic consistent with automatic content recognition (ACR) even after researchers turned off the feature in the…
Category: Cyber Security News
Critical Signal Vulnerability Could Keep Your Mic and Camera Live Even After Hang Up
A critical vulnerability in Signal’s calling library could allow a malicious call participant to keep hearing audio after another user tries to hang up.…
Hackers Are Breaking Into FortiGate, FortiWeb and Palo Alto GlobalProtect Systems to Steal Passwords
Internet-facing firewalls and VPN systems are under attack in a campaign that aims to steal credentials and gain lasting access to corporate networks. The…
China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach
China-state-aligned hackers used ARTEX, an AI-powered penetration-testing framework, to attempt access to more than 2,250 Microsoft 365 tenants following…
Railway Security Incident: Hackers May Have Accessed Customer Environment Variables
Railway has disclosed a security incident in which an unauthorized third party may have accessed customer environment variables, including some decrypted…
Node.js Releases Security Updates to Fix High-Severity TLS, DNS, and Brotli Vulnerabilities
Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting…
GoDaddy Revoking 404,607 TLS Certificates Following Compliance Failures
GoDaddy launched a mass revocation of 404,607 SSL/TLS certificates after finding that issued certificates did not match its published certificate…
12-Year-Old GitLab Vulnerability Allows Remote Code Execution on Self-Managed Server
GitLab has released urgent security updates for a critical vulnerability that could let attackers run code on self-managed servers without logging in.…
PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers
PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers.…
LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven…
China-Linked Hackers Turn Trusted Windows Applications Into Backdoors to Steal Credentials
China-linked hackers are using trusted Windows applications to load hidden backdoors, collect system details, and steal Active Directory credential data.…
APT28 Hackers Open Secret SSH Tunnel Into NATO Country’s Naval Shipbuilder Network
Russian cyberespionage group APT28 used the Hookedge backdoor to reach a naval shipbuilder’s network in a NATO member state, steal login material and set…
Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups
A ransomware operation known as The Gentlemen is using a mix of security tampering, service disruption and file encryption to make recovery harder for…
Google Upgrades Chrome With Gemini AI to Detect Fake Antivirus and Browser Update Scams
Google has upgraded Chrome’s Enhanced Protection mode with a more powerful Gemini AI model to detect fake antivirus alerts, browser update scams, and…
Node.js Releases Security Updates to Fix High-Severity TLS, DNS and Brotli Vulnerabilities
Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting…
Hackers Use AI-Powered Browsers to Hide Thousands of Fake Accounts and Bypass Security Detection
Cybercriminals are using AI-enabled “antidetect” browsers to manage large networks of fake online accounts while making each profile appear to come from a…
The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk
AI adoption is accelerating across enterprises, with employees increasingly relying on platforms like ChatGPT, Claude, and Microsoft Copilot for everyday…
Microsoft Unveils New OneDrive Command-Line Tool to Manage Sync Deployments
Microsoft has introduced a new command-line tool that gives IT admins a faster way to check and manage OneDrive sync across company devices. Microsoft…
PHP2Shell Vulnerability Gets a Public PoC Exploit for Security Testing
A public proof-of-concept repository shares verification tools and a lab setup to test two critical PHP vulnerabilities known as php2shell. The flaws,…
Microsoft Offers $40,000 for Complete Azure Vulnerability Reports, Just $4,000 for Incomplete Ones
Microsoft has introduced a new report-assessment system across its bug bounty programs, making the evidence security researchers submit a key factor in…