IBM has released security fixes for Financial Transaction Manager for Red Hat OpenShift after identifying multiple vulnerabilities that could enable…
Category: Cyber Security News
AWS Lambda Flaw Lets Attackers Bypass IAM Permissions and Access Cloud Services
AWS disclosed a high-severity authorization flaw in its Amazon Connect Salesforce Lambda application that could let attackers perform privileged cloud…
Critical NEXT.JS Flaw Enables RCE Attacks Via Weaponized SVG File
A critical Next.js vulnerability, tracked as CVE-2026-94545, affects the Node.js ImageResponse implementation in the next/og package and could allow…
Fake Crypto Wallet App Spreads PamStealer Malware to Steal Mac Passwords
A fake cryptocurrency wallet download is delivering a new version of PamStealer to Mac users. The attack starts with a convincing website whose installer…
NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information
NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities that could let attackers access…
The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves
Fake verification pages are steering people toward malware, but the web addresses behind the lures keep changing. Over five months, investigators tracked…
The Phishing Kit That Turned Microsoft’s Login Flow Into an AI-Powered Fraud Machine
EvilTokens turns a Microsoft sign-in into a route to corporate email fraud. The phishing kit, first seen in February 2026, tricks people into approving an…
The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths
Malware has moved into tools developers use to build and manage cloud infrastructure. A campaign linked to Graphalgo planted a remote access program in…
A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices
A free television offer led Android users to a dangerous download. Ads for a streaming service urged them to install an app that could give criminals…
Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers
SolarWinds released Observability Self-Hosted 2026.2.3 to fix two serious vulnerabilities that could let unauthenticated attackers remotely execute code…
AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse
Cyberattacks are increasingly built around familiar actions: signing in, approving a payment, or using a trusted app. Artificial intelligence can help…
This Malware Doesn’t Wait for Hackers—It Asks AI Models What to Do Next
A Windows malware sample called CLOSEDQUORUM can choose its next move without waiting for an attacker to send instructions. Once configured and deployed,…
Critical WordPress Core Vulnerability Lets Attackers Execute Code Without Logging In
WordPress has released version 7.1.2 to address a critical security vulnerability that could allow unauthenticated attackers to execute code on vulnerable…
WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected
A newly identified WordPress malware strain is using a hidden plugin, stolen administrator access, and a blockchain-based command channel to remain active…
Top 10 Best Decentralized Identity Solutions in 2026 [Ranked & Scored]
EU digital identity and GDPR compliance mandates, deepfake-driven fraud in authentication and verification, and credential-reuse fatigue pushed…
Top 10 Best Secrets Management Tools in 2026 [Ranked & Scored]
Machine identities now outnumber humans many times over, and a single API key in a public repo can undo a security program. We scored ten secrets managers…
ChatGPT Computer History Feature Creates New Attack Surface for macOS Infostealers
A new feature in ChatGPT now records your actions on your Mac, creating a detailed, plain-text diary of your work. This unencrypted log is vulnerable to…
Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access Through Windows Login Screen
ManageEngine has fixed a critical remote code execution vulnerability in ADSelfService Plus that could allow an unauthenticated attacker to run code as NT…
Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution Attacks
Google has released Chrome 154 for Windows, macOS, and Linux, fixing 108 security vulnerabilities, including several critical memory-safety flaws that…
ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data
The FBI is investigating alleged unauthorized activity affecting its recruitment infrastructure after the ShinyHunters cybercrime group claimed it…