OpenClaw has launched OpenClaw Enterprise (OCE), a free, open-source platform that helps organizations run persistent AI agents with stronger security and…
Category: Cyber Security News
Safari History Database Tags Can Reveal What Users Were Browsing on macOS
A little-known Safari database feature could give digital forensic investigators another way to understand browsing activity on macOS. Safari’s History…
Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak
Sony has moved to protect PlayStation 5 consoles with its latest system software update, as the newly released Relapse jailbreak draws attention to a…
Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access
Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session hijacking,…
Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks
Security researcher Timo Longin, working with the SEC Consult Vulnerability Lab, disclosed two email spoofing flaws in Apple’s iCloud mail infrastructure…
Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features
A critical vulnerability in Capacitor for Android and iOS could let a malicious link opened inside an affected mobile app load attacker-controlled web…
Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users
A flaw in a custom session-cookie system allowed an unauthenticated attacker to pose as employees and administrators in a yard management platform. The…
Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA
Milk Dragon is a phishing kit designed to turn an attractive online bargain into a fast-moving payment fraud attempt. The operation, also known as…
Kiteworks Patches 126 Vulnerabilities in Massive Security Update
Kiteworks has released a major security update that addresses 126 vulnerabilities across its secure data transfer platform and associated applications.…
OpenAI Blocks 15,000-User Campaign Trying to Extract Hidden AI Reasoning
OpenAI disrupted a coordinated campaign involving more than 15,000 users that attempted to extract protected reasoning from its AI models through…
Cloudflare Launches Free Certificate Authority for the Whole Internet
Cloudflare has announced plans to become a public Certificate Authority, expanding its role in securing the global web. The company aims to offer free,…
Treasury Sanctions Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in Losses
The U.S. Treasury has sanctioned a Tren de Aragua network accused of using malware to empty ATMs across the United States. Authorities linked the alleged…
Multiple Apache HTTP Server Vulnerabilities Could Enable Code Execution Attacks
The Apache Software Foundation released Apache HTTP Server 2.4.69 on October 1, 2026, addressing security flaws that could enable code execution, server…
U.S. Arrests Tech Company Owner for Allegedly Smuggling $300 Million in GPU Servers to China
U.S. authorities arrested Greg Lui, the owner of California technology company Earthmade Computer Inc., on October 1, 2026, over an alleged scheme to…
Critical Fortinet FortiMail 0-Day Vulnerability Actively Exploited in Attacks
Fortinet has warned that attackers are actively exploiting a critical FortiMail zero-day vulnerability, putting exposed email security systems at risk.…
FTC Investigating OpenAI, Anthropic and Other AI Models Over Potential Risks to Customers
The Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over potential risks their…
Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365
Hackers have built a Windows backdoor that uses Microsoft 365 for all its native command and control communications. Named Antino, the malware turns…
16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled
Authorities have identified a 16-year-old as the suspected main operator of the KillSec ransomware group after an international law-enforcement operation…
Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor
A fake Zoom installer is tricking Mac users into handing over their login passwords and launching CloudSyncD, a newly identified backdoor. The malware…
Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators
A China-nexus threat actor is continuing to exploit Microsoft SharePoint Server vulnerabilities to deploy Warlock ransomware, with recent attacks striking…