TeamViewer has released security updates to fix five high-severity vulnerabilities affecting its Full Client, Host, and related components across Windows,…
Tag: Cyber Security News
New 2CLoader Malware Evades Security Tools to Deploy Vidar and Remus Stealers
2CLoader is a newly identified malware loader that helps attackers place credential-stealing programs on Windows computers. The loader was first seen in…
Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild
Cisco has disclosed a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager that attackers are actively exploiting. The flaw,…
Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root
A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute arbitrary code with root-level privileges or trigger…
CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access
A Docker flaw, CVE-2026-17106 (dubbed CopyEscape), lets malicious containers write files outside the docker cp destination, potentially enabling code…
PaperPhone Headless Browser Network Uses 75,000 IPs and Fabricated Mobile Identities Across 43 Countries
PaperPhone is a large headless-browser network built to make automated web requests look like ordinary mobile traffic. It does not rely on a single…
AI Coding Agents Leak 13,000+ Internal Screenshots From 300+ Companies on GitHub
AI coding agents exposed more than 13,000 internal screenshots from over 300 organizations by publishing them in publicly accessible GitHub repositories,…
Hackers Turned a PaperCut Print Server Into a Path to the Domain Controller
A vulnerable print server became the entry point for an Active Directory compromise after attackers exploited two PaperCut MF zero-day flaws. The…
Supply Chain Attacks Turn Developer Machines Into Gateways for Cloud Breaches
A routine software update can now open the door to a cloud breach. Attackers are hiding credential stealing malware inside trusted packages and…
Hackers Disguise Remote Access Tools as Zoom and PDF Installers to Take Over PCs
Hackers are using familiar Zoom setup files and PDF reader downloads to place remote-control software on business computers. The campaign turns ordinary…
Phishing Response: 3 Steps SOC Teams Can Take to Investigate Threats Faster
Investigating a phishing alert often means working through several layers of activity before an analyst can confidently close or escalate the case. Modern…
Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
Google released a Chrome Stable update fixing 32 security vulnerabilities across Windows, macOS, and Linux, including one critical and multiple…
Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
Google has warned that threat actors are actively exploiting two critical Citrix NetScaler zero-day vulnerabilities to gain root access, install stealthy…
Russian Hackers Target 100+ Organizations With New RedFlick Phishing Attack
Russian state-linked hackers have expanded a phishing operation that uses a new RedFlick delivery chain to reach more than 100 organizations. The campaign…
Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS
Cloudflare is building a certificate authority to make post-quantum website authentication practical without burdening TLS connections with oversized…
Fortinet Uncovers SectopRAT Variant Hidden Inside Tampered Legitimate Windows Software
A SectopRAT variant has been found hidden inside tampered Windows software, allowing attackers to control an infected computer and steal sensitive…
RSA Launches Agent ID Platform to Secure AI Agents and MCP Servers
RSA has announced RSA Agent ID, a new identity security platform that helps regulated organizations discover, secure, and govern AI agents. The launch…
RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions
RATHat Android malware uses Gemini AI to help take control of infected phones beyond normal app permissions. The banking trojan abuses a developer feature…
Unsloth Studio RCE Flaw Lets Malicious Hugging Face Models Execute Code
A now-patched vulnerability in Unsloth Studio allowed a malicious Hugging Face model repository to execute Python code when a user merely selected the…
New OperTraitors Tool Reveals Dangerous Privilege Escalation Paths in Kubernetes Operators
A new open-source security tool, OperTraitor, has revealed how Kubernetes operators can create dangerous privilege escalation paths when they receive…