The U.S. Department of Justice has announced the court-authorized seizure of internet domains linked to “NightmareStresser,” one of the world’s…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Unbound 1.26.1 Patches Critical RCE, DoS, and DNSSEC Flaws
A major security update has been issued for Unbound, the widely used validating DNS resolver developed by NLnet Labs. On September 16, 2026, the project…
Cyberattack Knocks International Meteor Organization Website Offline
A cyberattack has forced the International Meteor Organization (IMO), one of the leading providers of meteor observation, to take much of the website…
Brevo Breach Exposes Customer Websites to ClickFix Malware
Email marketing and customer relationship management platform Brevo, formerly known as Sendinblue, suffered a supply chain attack in which malicious code…
Parallels Desktop Vulnerability Gives Any Local Mac User Full Root Access, Intel Mac Users Left Without a Clear Fix
Security researchers at JFrog disclosed the vulnerability on Tuesday, assigning it the identifier CVE-2026-90894 and the nickname “ParaShells.” JFrog…
Cyberattack on Tanker Prompts Coast Guard-FBI Security Boarding
A tanker crossing the Gulf of Mexico was boarded by U.S. Coast Guard and FBI personnel last month after its onboard network came under attack from…
Vercel Sandbox Challenge Uncovers Linux Kernel Flaws
Vercel has conducted a two-week security challenge that has uncovered numerous vulnerabilities in the Linux kernel networking stack that is used by its…
US Lawmakers Raise Alarm Over Alleged Hacking by India-Based Firms
Three Indian-based companies have been accused of conducting hacking campaigns and stealing data from thousands of Americans and US businesses, according…
Acronis Discloses Actively Exploited Privilege Escalation Bug in Its cPanel Backup Plugin
Acronis has confirmed that attackers are actively exploiting a high-severity security flaw in its backup plugin for cPanel and WebHost Manager (WHM),…
Spanish Data Watchdog Publicises First AI Agent-Linked Data Breach Report
Spain’s data protection watchdog said it has received the first reported notification of a personal data breach allegedly carried out by an artificial…
Homebrew 7.0.0 Ships With Fixes for Eight Security Advisories
Homebrew, a popular package manager for installing command-line tools and desktop apps on macOS and Linux, released version 7.0.0 on Sunday, with eight…
A $159 Circuit Board Just Broke Cloud Computing’s Strongest Security Guarantee
Security researchers have found a way to defeat the memory protections that Intel and AMD sell to cloud customers as their last line of defense against an…
Pro-Ukraine Hacking Cat Group Deploys New Malware Against Russian Targets
A pro-Ukraine hacktivist group known as Hacking Cat has significantly escalated its cyber operations against Russian targets by deploying newly developed…
Japan Digital Agency Data Breach Linked to VPN Vulnerability
Government Solution Service (GSS) of Japan’s Digital Agency was compromised by a vulnerability in a VPN device, resulting in unauthorized access to the…
$13 Billion in Losses Since 2023, Treasury Asks Banks to File Cyber Scam Reports
The federal government has asked financial organizations to be more careful in detecting and reporting scams done by overseas scammers. The Treasury…
India Orders Google to Remove 57 Firebase Sites Linked to Cyber Scams
The Indian government has directed Google to take down dozens of websites and databases hosted on Firebase after finding that cybercriminals were…
Your Company’s Phishing Tests Are Measuring the Wrong Thing
When a phishing simulation returns a low click rate, security teams tend to relax. Leadership checks a compliance box. The program gets renewed. But a…
Lost Phone Reporting Flaws Could Let Hackers Block Any Mobile Device for $4
A new security investigation has revealed serious weaknesses in the systems used by mobile carriers to block lost or stolen phones. Researchers found that…
Android Simplifies Secure Migration of Saved Logins
With the advent of Android’s new credential transfer feature, passwords and passkeys can be transferred directly between supported password managers…
South Korean Startup Suffers Breach Due to Encryption Management Failure
Modu-ui, a South Korean government backed startup support platform, suffered a data breach in July. The breach later disclosed a critical encoding key…