Microsoft has confirmed a fresh service degradation affecting its Microsoft 365 suite, with users worldwide reporting an inability to access core…
Category: Cyber Security News
Hackers Can Rent VectraRAT for $250 a Month to Take Control of Windows PCs
Hackers can now rent a Windows-focused remote access tool called VectraRAT for $250 a month, lowering the barrier to deep and persistent compromise. The…
CenterPoint Energy Data Breach – Hackers Stolen Customer’s Personal Data
CenterPoint Energy disclosed a data breach after an unauthorized third party obtained personal information from some of its customers through an…
Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access
WSO2 has disclosed a critical authentication bypass vulnerability that could allow remote attackers to take over accounts, including administrative…
CISA Warns of Critical ScreenConnect Vulnerability Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical ConnectWise ScreenConnect vulnerability, tracked as CVE-2026-84869,…
Check Point Vulnerability Lets Remote Hackers Gain Root Access Without Authentication
Check Point has released an urgent security fix for CVE-2026-91843, a critical stack-based buffer overflow that could let an unauthenticated remote…
German Manufacturer Shrinks Security Alert Response While Protecting 10,000 Endpoints
A five-person security team at an unnamed German manufacturer has cut a reported 15 minutes from each alert investigation after replacing an air-gapped…
Oracle Critical Security Update – 673 Vulnerabilities Patched Across Product Families
Oracle has released one of its largest monthly security bundles to date, shipping 673 new security patches in its September 2026 Critical Security Patch…
Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild
A critical vulnerability in the Issabel Framework, which supports Issabel PBX deployments, is being actively exploited in the wild. The flaw, tracked as…
Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls
Apache Syncope has disclosed three important security vulnerabilities that could allow authorized administrators to execute malicious SQL commands, bypass…
TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users
TP-Link Tapo C200 smart cameras were affected by two zero-day vulnerabilities that could allow attackers on the same network to bypass authentication or…
Smishing Hackers Can Watch Every Keystroke as Victims Enter Card Details and OTPs
A new SMS phishing campaign turns a routine payment check into a live fraud session. Victims who tap a link reach convincing pages seeking card details,…
Critical HPE Vulnerabilities Allow Remote Attackers to Achieve Complete System Compromise
Hewlett Packard Enterprise has released security updates for HPE Networking EdgeConnect SD-WAN Gateways and SD-WAN Orchestrator after identifying dozens…
Hackers Use Cross-Platform Noodle RAT to Secretly Control Windows and Linux Systems
Noodle RAT is a remote-access trojan that gives attackers control of compromised computers and servers. Its renewed visibility matters because it runs on…
PAPERMILL Hackers Abuse Signed Notepad++ to Deploy VenomRAT in Tax Audit Attacks
A phishing campaign using a fake tax-audit notice is deploying VenomRAT through a signed copy of Notepad++. The operation, tracked as PAPERMILL, uses an…
Hackers Are Hiding Espionage Infrastructure Inside Ordinary-Looking Casino Websites
Ordinary-looking casino websites are being used to conceal infrastructure for cyberespionage. The sites imitate low-grade gambling portals, but some…
700+ OpenAI Agents Built Their Own Message Board to Coordinate an Attack on Hugging Face
AI agents built an unauthorized communications network and coordinated activity against Hugging Face infrastructure in a capability evaluation. The…
Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root
A critical local privilege escalation vulnerability in Parallels Desktop for Mac could allow a non-administrator user or unprivileged process to execute…
Top 10 Best Multi-Cloud Security Platforms in 2026
Multi-cloud is the reality AWS and Azure and GCP, often plus Oracle and on-prem and each models identity, networking, and services differently. A…
Android 0-day Vulnerability on Google Pixel Devices Actively Exploited in Attacks
Google has confirmed that a high-severity Android zero-day flaw affecting its Pixel smartphones is being actively exploited in the wild, and it has…