The Apache Software Foundation released Apache HTTP Server 2.4.69 on October 1, 2026, addressing security flaws that could enable code execution, server…
Tag: Cyber Security News
U.S. Arrests Tech Company Owner for Allegedly Smuggling $300 Million in GPU Servers to China
U.S. authorities arrested Greg Lui, the owner of California technology company Earthmade Computer Inc., on October 1, 2026, over an alleged scheme to…
Critical Fortinet FortiMail 0-Day Vulnerability Actively Exploited in Attacks
Fortinet has warned that attackers are actively exploiting a critical FortiMail zero-day vulnerability, putting exposed email security systems at risk.…
FTC Investigating OpenAI, Anthropic and Other AI Models Over Potential Risks to Customers
The Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over potential risks their…
Hackers Built a Windows Backdoor Whose Entire C2 Lives Inside Microsoft 365
Hackers have built a Windows backdoor that uses Microsoft 365 for all its native command and control communications. Named Antino, the malware turns…
16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled
Authorities have identified a 16-year-old as the suspected main operator of the KillSec ransomware group after an international law-enforcement operation…
Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor
A fake Zoom installer is tricking Mac users into handing over their login passwords and launching CloudSyncD, a newly identified backdoor. The malware…
Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators
A China-nexus threat actor is continuing to exploit Microsoft SharePoint Server vulnerabilities to deploy Warlock ransomware, with recent attacks striking…
Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts
A China-aligned hacking group tracked as TA419 has impersonated a senior Anthropic employee and well-known policy figures to target US artificial…
Microsoft Enables Windows 11 Backup Setting by Default for Organizations
Microsoft has enabled Windows settings backup by default for eligible devices running Windows 11, version 26H2, turning an opt-in function into a baseline…
Hackers Abuse Microsoft Defender Exclusions to Hide Malware From Antivirus Scans
Hackers are abusing Microsoft Defender Antivirus exclusions to keep malicious files outside routine security scans. Rather than switching protection off…
Axios HTTP/2 Flaws Enable SSRF Control Bypass and Node.js Denial of Service
Axios has disclosed two high-severity vulnerabilities in its HTTP/2 implementation that could allow attackers to bypass outbound network controls or crash…
WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor
A WordPress backdoor is bringing deleted malware back within seconds, turning routine cleanup into a cycle of reinfection. Called SC, the infection…
Node.js ImageResponse Implementation Vulnerability Enables Remote Code Execution
A critical vulnerability in Next.js could allow remote code execution in applications that use the Node.js implementation of ImageResponse from the…
New PS5 Relapse Exploit Breaks Into the Kernel Across Years of Firmware Releases
Researchers have released a new PlayStation 5 jailbreak, Relapse, that public reports say reaches firmware 7.00 through 13.60 on both the standard PS5 and…
MetaMask Security Incident Affecting Parts of Infrastructure
MetaMask has disclosed an ongoing security incident affecting part of its infrastructure, prompting the cryptocurrency wallet provider to begin…
Researchers Use New CPU Attack to Steal Linux Root Password Hash From Memory
Branch Target Reuse (BTR) is a newly disclosed variant of the Spectre-v2 attack that leverages stale CPU branch-prediction data to leak sensitive…
ModSecurity Vulnerabilities Let Attackers Bypass Web Application Firewall Protections
Multiple newly disclosed vulnerabilities in OWASP ModSecurity could let attackers bypass web application firewall protections by exploiting parsing…
Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access
Hackers are exploiting a serious flaw in internet-facing Zimbra mail servers with specially crafted emails. The weakness lets an outsider run commands on…
Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed
An analysis of public GitHub code has uncovered 543,699 unique credentials that remained valid when researchers tested them on July 27 and 28, 2026. The…