Google has detailed six Advanced Protection enhancements for Android 17, targeting sophisticated attacks, scams and unauthorized access. Announced on…
Category: Cyber Security News
Top 10 Best Just-in-Time (JIT) Access Tools in 2026 [Ranked & Scored]
Credentials that always work are credentials worth stealing which is why mitigating how attackers exploit privileged access has driven organizations…
Top 10 Best SAST Tools in 2026 [Ranked & Scored]
The AI-code flood made one truth undeniable: static analysis only matters if developers fix what it finds. We scored ten SAST tools with fix-rate…
Hacker Group Claims to Have Stolen Trump Mobile Customers’ Personal Data
Trump Mobile customers’ personal data has appeared on a dark web leak site after a ransomware group called BYOD claimed it breached the company. The…
Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root
An AI agent breached the Dutch Institute for Vulnerability Disclosure by chaining two previously unknown flaws in Zammad, an open source helpdesk…
16 Suspects Detained in Timor-Leste for Japanese Police Impersonation Scam
Investigators in Timor-Leste have detained 16 people after raiding a building in Dili allegedly used to run telephone scams against people in Japan. The…
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers
A malicious HEIC image can become a route to remote code execution on a WordPress server. Researchers have demonstrated an attack chain that turns a…
Researcher Infiltrates Lazarus Group’s Crypto Laundering Network After $1.5B Bybit Hack
Blockchain investigator ZachXBT says he infiltrated a Chinese crypto laundering network linked to North Korea’s Lazarus Group after the $1.5 billion Bybit…
Apple Tightens macOS Full Disk Access as AI Agents Become More Powerful
Apple plans to add stronger controls to Full Disk Access in macOS, warning that the powerful permission can expose a user’s most private data as AI agents…
Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports
Google has temporarily stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program(OSS VRP)…
Google Gemini Will Soon Get Full Access Permission to Use Your Computer
Google’s Gemini Desktop app may soon introduce a “Full Access” permission that would let the AI assistant read files, control applications, access network…
CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a Citrix NetScaler vulnerability, tracked as CVE-2026-88779, to its Known Exploited…
GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware
GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The…
ClickFix Fake CAPTCHA Attack Executes Malware Hidden Inside Browser Cache
A new ClickFix campaign is turning a web safety check into a route for malware. Visitors to compromised websites see a fake CAPTCHA or repair message and…
RemoveMacAI Free Up 12GB of Data by Removing Apple Intelligence Models
RemoveMacAI, an open-source tool on GitHub, lets Mac users disable Apple Intelligence, remove its downloaded models, and block future downloads. The…
Windows 11 KB5124010 Update Crashes Productivity Apps, Games and Media Players
Microsoft has confirmed a Windows 11 audio decoding bug that can cause some productivity apps, games, and media players to close without warning. The…
Denmark Data Breach Exposes Personal Records of 8.8 Million People
Denmark has confirmed a major data breach involving its Central Population Register, known as CPR, after unauthorized parties accessed personal records…
Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing
Hackers are using a legitimate ScreenConnect client to turn a payment notification into a route for remote access. Instead of delivering custom malware,…
CISA Warns of Zammad DIVD Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added two Zammad vulnerabilities to its Known Exploited Vulnerabilities catalog after…
Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains
Google has revealed an internal AI security agent that found more than 500 verified cross-site scripting, or XSS, flaws across its own web applications.…