A China-aligned hacking group tracked as TA419 has impersonated a senior Anthropic employee and well-known policy figures to target US artificial…
Category: Cyber Security News
Microsoft Enables Windows 11 Backup Setting by Default for Organizations
Microsoft has enabled Windows settings backup by default for eligible devices running Windows 11, version 26H2, turning an opt-in function into a baseline…
Hackers Abuse Microsoft Defender Exclusions to Hide Malware From Antivirus Scans
Hackers are abusing Microsoft Defender Antivirus exclusions to keep malicious files outside routine security scans. Rather than switching protection off…
Axios HTTP/2 Flaws Enable SSRF Control Bypass and Node.js Denial of Service
Axios has disclosed two high-severity vulnerabilities in its HTTP/2 implementation that could allow attackers to bypass outbound network controls or crash…
WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor
A WordPress backdoor is bringing deleted malware back within seconds, turning routine cleanup into a cycle of reinfection. Called SC, the infection…
Node.js ImageResponse Implementation Vulnerability Enables Remote Code Execution
A critical vulnerability in Next.js could allow remote code execution in applications that use the Node.js implementation of ImageResponse from the…
New PS5 Relapse Exploit Breaks Into the Kernel Across Years of Firmware Releases
Researchers have released a new PlayStation 5 jailbreak, Relapse, that public reports say reaches firmware 7.00 through 13.60 on both the standard PS5 and…
MetaMask Security Incident Affecting Parts of Infrastructure
MetaMask has disclosed an ongoing security incident affecting part of its infrastructure, prompting the cryptocurrency wallet provider to begin…
Researchers Use New CPU Attack to Steal Linux Root Password Hash From Memory
Branch Target Reuse (BTR) is a newly disclosed variant of the Spectre-v2 attack that leverages stale CPU branch-prediction data to leak sensitive…
ModSecurity Vulnerabilities Let Attackers Bypass Web Application Firewall Protections
Multiple newly disclosed vulnerabilities in OWASP ModSecurity could let attackers bypass web application firewall protections by exploiting parsing…
Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access
Hackers are exploiting a serious flaw in internet-facing Zimbra mail servers with specially crafted emails. The weakness lets an outsider run commands on…
Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed
An analysis of public GitHub code has uncovered 543,699 unique credentials that remained valid when researchers tested them on July 27 and 28, 2026. The…
Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session
TeamViewer has released security updates to fix five high-severity vulnerabilities affecting its Full Client, Host, and related components across Windows,…
New 2CLoader Malware Evades Security Tools to Deploy Vidar and Remus Stealers
2CLoader is a newly identified malware loader that helps attackers place credential-stealing programs on Windows computers. The loader was first seen in…
Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild
Cisco has disclosed a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager that attackers are actively exploiting. The flaw,…
Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root
A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute arbitrary code with root-level privileges or trigger…
CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access
A Docker flaw, CVE-2026-17106 (dubbed CopyEscape), lets malicious containers write files outside the docker cp destination, potentially enabling code…
PaperPhone Headless Browser Network Uses 75,000 IPs and Fabricated Mobile Identities Across 43 Countries
PaperPhone is a large headless-browser network built to make automated web requests look like ordinary mobile traffic. It does not rely on a single…
AI Coding Agents Leak 13,000+ Internal Screenshots From 300+ Companies on GitHub
AI coding agents exposed more than 13,000 internal screenshots from over 300 organizations by publishing them in publicly accessible GitHub repositories,…
Hackers Turned a PaperCut Print Server Into a Path to the Domain Controller
A vulnerable print server became the entry point for an Active Directory compromise after attackers exploited two PaperCut MF zero-day flaws. The…