A routine software update can now open the door to a cloud breach. Attackers are hiding credential stealing malware inside trusted packages and…
Category: Cyber Security News
Hackers Disguise Remote Access Tools as Zoom and PDF Installers to Take Over PCs
Hackers are using familiar Zoom setup files and PDF reader downloads to place remote-control software on business computers. The campaign turns ordinary…
Phishing Response: 3 Steps SOC Teams Can Take to Investigate Threats Faster
Investigating a phishing alert often means working through several layers of activity before an analyst can confidently close or escalate the case. Modern…
Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
Google released a Chrome Stable update fixing 32 security vulnerabilities across Windows, macOS, and Linux, including one critical and multiple…
Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
Google has warned that threat actors are actively exploiting two critical Citrix NetScaler zero-day vulnerabilities to gain root access, install stealthy…
Russian Hackers Target 100+ Organizations With New RedFlick Phishing Attack
Russian state-linked hackers have expanded a phishing operation that uses a new RedFlick delivery chain to reach more than 100 organizations. The campaign…
Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS
Cloudflare is building a certificate authority to make post-quantum website authentication practical without burdening TLS connections with oversized…
Fortinet Uncovers SectopRAT Variant Hidden Inside Tampered Legitimate Windows Software
A SectopRAT variant has been found hidden inside tampered Windows software, allowing attackers to control an infected computer and steal sensitive…
RSA Launches Agent ID Platform to Secure AI Agents and MCP Servers
RSA has announced RSA Agent ID, a new identity security platform that helps regulated organizations discover, secure, and govern AI agents. The launch…
RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions
RATHat Android malware uses Gemini AI to help take control of infected phones beyond normal app permissions. The banking trojan abuses a developer feature…
Unsloth Studio RCE Flaw Lets Malicious Hugging Face Models Execute Code
A now-patched vulnerability in Unsloth Studio allowed a malicious Hugging Face model repository to execute Python code when a user merely selected the…
New OperTraitors Tool Reveals Dangerous Privilege Escalation Paths in Kubernetes Operators
A new open-source security tool, OperTraitor, has revealed how Kubernetes operators can create dangerous privilege escalation paths when they receive…
AI Agent Finds Linux Kernel Bug That Turns a Tiny Memory Write Into Root Access
Autonomous security research platform XBOW has disclosed CVE-2026-72018, a high-severity Linux kernel vulnerability that converts a tightly constrained…
MCP Python SDK OAuth Flaw Lets Malicious Servers Hijack AI Agent Accounts
A high-severity flaw in the official Model Context Protocol (MCP) Python SDK could allow a malicious MCP server to steal OAuth authentication material and…
OpenAI Rolled out Codex Security Cloud, an Always-on Application Security Service
OpenAI has upgraded Codex with Codex Security Cloud, an always-on application security service designed to scan GitHub repositories, monitor incoming…
OpenSSL Fixes High-Severity Flaw That Can Leak Server Memory in Plaintext
OpenSSL has released security updates for a high-severity vulnerability that could expose heap memory as plaintext during Datagram Transport Layer…
Octopus Server Flaw Lets Authenticated Users Execute Code Through Insecure JSON Deserialization
Octopus Deploy has disclosed a high-severity vulnerability in Octopus Server that could allow authenticated users to execute arbitrary code on affected…
FBI and Dutch Police Arrested Alleged ShinyHunters Hackers Group Leader
FBI Director Kash Patel has announced the arrest of an alleged leader of ShinyHunters, the cyber-extortion group linked to attacks across the United…
Hackers Hide Malware Inside 7-Zip Installers Using a New Evasion Technique
Malware operators are hiding code inside the part of a 7-Zip installer that unpacks files. A seemingly ordinary installation can start while a concealed…
How US SOCs and MSSPs Can Use Threat Intelligence to Detect Phishing Infrastructure Earlier
Phishing remains one of the most persistent problems for security teams, as the challenge is no longer limited to identifying suspicious emails. Behind a…