Phishing is arriving via trusted email systems. Instead of using obvious malicious addresses, attackers send ordinary account alerts, invoices and renewal…
Category: Cyber Security News
Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login
Attackers are actively exploiting a critical flaw in a WooCommerce extension to seize control of WordPress sites without a username or password. The issue…
Google’s New Search Redirects Make It Harder to Check Where Links Lead Before Clicking
Google is changing how some search-result links behave. Certain results now pass through an encoded Google redirect rather than opening the listed site,…
Hackers Exploit Marimo RCE to Steal AWS Credentials and Reach Bastion Host in 8 Seconds
Threat actors have been observed exploiting a critical remote code execution vulnerability in the Marimo notebook platform to steal AWS credentials and…
Microsoft Confirms KB5002914 Update Breaks Copy and Paste on Excel
Microsoft has confirmed that the September 8, 2026 Excel security update KB5002914 can silently break copy and paste in Excel 2016, 2019, 2021, and 2024.…
Hackers Abuse VSSAdmin to Extract NTDS.dit and Delete Windows Recovery Copies
Windows attackers are turning a built-in recovery feature into a tool for disruption. By abusing Volume Shadow Copy Service, intruders can copy protected…
Hackers Actively Exploiting Gitea n-day RCE Vulnerability in the Wild to Hijack Instances
Hackers are actively exploiting a critical Gitea remote code execution vulnerability, tracked as CVE-2026-60004, to compromise internet-facing source-code…
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP With $159 DDR5 Device
Confidential cloud systems are designed to keep a customer’s data hidden even from the server operator. DDRop shows that this promise can fail when an…
Telegram Desktop Flaw Lets Attackers Steal Chat Messages Through Poisoned HTML Exports
A high-severity Telegram Desktop vulnerability let attackers hide JavaScript in bot-created inline keyboard buttons and steal chat content when victims…
Critical WordPress Plugin Flaws Put Over 600,000 Websites at Risk of Takeover
Two critical vulnerabilities in The Events Calendar WordPress plugin could allow unauthenticated attackers to take over vulnerable websites. The flaws…
Hackers Use Autonomous AI Agents to Harvest Thousands of Credentials in Under 6 Hours
Cybercriminals are using autonomous AI agents to turn compromised cloud systems into rapid credential-harvesting platforms. In a newly documented case, a…
Cisco Secure Email Gateway 0-day Vulnerability Actively Exploited in the Wild to Run Malicious Code
Cisco has issued an urgent warning regarding an actively exploited zero-day vulnerability in its Secure Email Gateway appliances that allows remote,…
Top 10 Best Cloud Access Security Broker (CASB) Solutions in 2026
Bottom line up front: almost nobody buys a standalone CASB anymore it’s a function of a secure web gateway/SSE platform, and increasingly overlaps with…
Top 10 Best Serverless Security Solutions in 2026
Serverless changed the attack surface: no host to protect, but every function is a tiny privileged identity with its own code, dependencies, and…
Top 10 Best Cloud Infrastructure Entitlement Management (CIEM) Tools in 2026
Bottom line up front: cloud identities human and machine are the perimeter now, and most are wildly over-privileged. CIEM answers “who can reach what, and…
Hackers Hijack HBO Max Reddit Account to Push 108 ClickFix Malware Ads
Hackers have used a trusted Reddit identity to turn advertisements into a malware delivery channel. A compromised, verified HBO Max account, u/hbomax,…
Top 10 Best Kubernetes Security Tools in 2026
Kubernetes security has its own shape admission control gating what deploys, network policy governing pod-to-pod traffic, runtime detection watching live…
Top 10 Best Container Security Tools in 2026
Container security spans the whole lifecycle build (image scanning, IaC), ship (registry, admission), and run (runtime detection, drift) across modern…
Revolut Data Breach Via Fake Government Requests – What We Know So Far
British fintech Revolut has confirmed a data breach in which an unauthorized third party obtained sensitive customer records by submitting fraudulent…
Hackers Exploit Critical Cisco Secure Email Gateway Vulnerability in the Wild to Run Malicious Code
Cisco has issued an urgent warning regarding an actively exploited zero-day vulnerability in its Secure Email Gateway appliances that allows remote,…