Meta, Google, Microsoft and OpenAI joined an international crackdown on West African scam networks that removed more than 3.7 million Facebook and…
Category: Cyber Security News
Hackers Use Fake WatchGuard VPN Download Site to Steal Login Credentials
Hackers used a fake WatchGuard VPN download website to steal login details before offering visitors the real, digitally signed VPN installer. The attack…
FBI Disrupts North Korean Famous Chollima Laptop Farms Used to Infiltrate U.S. Companies
The FBI disrupted several U.S. laptop farms used by North Korean threat group FAMOUS CHOLLIMA in late September 2026, cutting off infrastructure that…
PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape
A public proof of concept for Vghost, a high-severity Linux vhost flaw tracked as CVE-2026-74580, shows how the bug can let a local user gain root access…
Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6
Security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI agents. The XBOW team says the work took six…
VirusTotal Integrates Threat Intelligence With ChatGPT for Malware Analysis
VirusTotal can now bring threat intelligence into ChatGPT through VirusTotal AI (VTAI), allowing users to investigate suspicious files, URLs, domains, and…
Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials
Attackers chained three zero-day flaws in Ivanti Connect Secure VPN appliances to gain root-level access without logging in, then searched for credentials…
Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks
Google released a Chrome security update that addresses 37 vulnerabilities, including seven critical flaws that raise concerns about memory corruption and…
Gears of War: E-Day Hit by DDoS Attack, Causing Login Failures and Disconnects
Gear of War: E-Day players faced login failures, sudden disconnects, and other online service problems after distributed denial-of-service attacks…
Google Awarded a $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6
XBOW says its security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI agents. The team says the work…
Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks
Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges. Tracked as…
Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server
A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its Windows Server Update Services (WSUS)…
Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit
Two powerful iPhone exploit kits, Coruna and DarkSword, show how a visit to a malicious or compromised website can put an outdated device at risk. The…
Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People
Hackers used an employee’s stolen credentials to access some of Meta’s GitHub repositories, taking product source code and personal information linked to…
Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer
IT administrators searching Google for PuTTY may see a convincing fake download result mixed with legitimate links. Researchers documented a campaign that…
Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks
Microsoft fixed three Windows BitLocker vulnerabilities CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 that could enable privilege escalation or…
OpenAI Engineer Arrested for Planting Spyware Device in an Executive Conference Room
An OpenAI engineer has been arrested for allegedly hiding an audio recording device in an executive conference room at the company’s San Francisco…
Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks
Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections. Tracked as…
Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication
Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access…
Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts
Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed to help security…