A new Android bug named GhostMap can leave a phone stuck in a crash loop after a user installs a single crafted app. The app does not need to be opened,…
Category: Cyber Security News
HYFLOCK Ransomware Encrypts Only First 4KB of Larger Files, Leaves Parts of Victims’ Files Accessible
HYFLOCK ransomware has an encryption weakness that leaves parts of larger files readable, giving affected organizations a limited chance to recover data…
OpenSSH Flaw Could Let Attackers Bypass Password Authentication on Alpine Linux Servers
A critical OpenSSH flaw could let remote attackers bypass password authentication on affected Alpine Linux servers, including accounts intended for…
Researchers Discover White House Network IP Available for Rent Through 28 Proxy Services
Researchers at Layer3 Intel found that 28 residential proxy services rent addresses on the White House network. Anyone with a few dollars could send web…
Hackers Turn Popular Chinese Keyboard Software Into a Backdoor for Cyberespionage Attacks
A China-aligned hacking group is abusing Sogou Input Method, one of the most popular Chinese typing tools, to secretly install a backdoor called DarkVigil…
ARTEX Hackers Expose Their Own Servers, Revealing AI Tools Behind South Korean Bank Breaches
A hacker’s own mistake has given researchers a rare look at how AI tools were used to break into South Korean financial firms. The operator left several…
One Hacker Uses 12 AI Agents to Breach Taiwan’s Emergency Services and Steal Sensitive Data
A single operator in Taiwan built a team of 12 AI agents and used it to attack hundreds of organizations in 11 countries. The campaign hit emergency…
Tata Motors iRA App Flaws Could Let Hackers Impersonate Car Owners and Access Vehicle Services
Tata Motors’ iRA 2.0 and iRA.ev mobile apps contain four security flaws that could let attackers steal credentials, impersonate car owners, and access…
Hackers Hide Marsalek Malware in Fake Roblox and Fortnite Cheats to Steal Passwords and Crypto Wallet Data
Hackers are hiding a free information stealer called Marsalek inside fake cheats and tools for games such as Roblox, Fortnite, and Counter-Strike 2. The…
Top 10 Best Security Log Management Tools in 2026 [Ranked & Scored]
Security logging has become a commodities market with three prices: the cost to move a log, to store it, and to ask it a question. The 2026 winners…
Top 10 Best Threat Hunting Services in 2026 [Ranked & Scored]
Detection engineering catches what you anticipated; threat hunting catches what you didn’t. The craft is hypothesis-driven “if an actor used this…
Apple to Scan for Every Photo and File Shared Through a Public iCloud Link for Harmful Content
Apple will begin checking photos and files shared through public iCloud links for harmful content with version 27.3 or later of iOS, iPadOS, macOS, and…
Top 10 Best Security Data Lake Platforms in 2026 [Ranked & Scored]
The security data lake movement is a jailbreak: telemetry escaping SIEM-priced storage into open formats on cheap object storage, with detection and query…
Hackers Trick Mac Users Into Running Terminal Commands That Install Phexia Password-Stealing Malware
A macOS malware family called Phexia is spreading through fake web pages that talk Mac users into pasting a command into Terminal. Once the command runs,…
Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication
Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting…
Hackers Use Fake Government Websites and CAPTCHA Checks to Deliver SimpleHelp Remote Access Software
Hackers are impersonating the Israel Tax Authority through phishing emails, fake government websites, and CAPTCHA-style checks to trick employees into…
DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents
DigiCert has confirmed a data breach involving an internal business system that stored customer contact details and identity documents. Unauthorized…
DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails
DreamHost has confirmed a breach that exposed customer login details after hackers exploited its web-based File Manager. The hosting provider said…
OpenAI Cyber Model Uncovers 948 Linux Kernel Privilege Escalation Vulnerabilities
OpenAI says an automated research pipeline found and proved 948 separate Linux kernel privilege escalation flaws in one run. These bugs could let a normal…
6 Challenges SOC Leaders Should Turn into Priorities in 2027
Security teams face mounting pressure to keep pace with increasingly complex threats while working within tight budgets and persistent staffing…