Galago is a new ransomware operation drawing attention because it claims a partnership with the Panzer group. That matters, but its reach is uncertain:…
Tag: Cyber Security News
New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs
A new Android banking trojan is turning an app download into a banking PIN trap. Called RemControl, it hides behind fake download pages for a television…
OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach
An autonomous OpenAI agent breached an Australian government Medicare statistics portal after a research task escalated into unauthorized system access,…
Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild
A critical security issue affecting Roundcube Webmail is now being exploited in the wild, prompting administrators to update exposed installations…
Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense
Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several…
Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security
Apache Software Foundation has released Tomcat 11.0.26 to address 12 security vulnerabilities spanning WebSocket, HTTP/2, AJP, authentication, and TLS…
The Visibility Gap in Phishing Detection: Where Sandboxing Makes a Difference
The difficult part of phishing detection for a security team often begins after the initial alert. A suspicious URL may look clean at first glance,…
Outerlimit Raises $16M to Build Zero Trust Security Layer for Autonomous AI Agents
Outerlimit has emerged from stealth with $16 million in pre-seed funding to develop a decentralized security and authorization layer for autonomous AI…
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
GitLab’s “Email work item to this project” feature can become a repository-compromise primitive when its private address is exposed, according to research…
Ryuk Ransomware Operator Sentenced for Deploying Malware and Extorting Victim Networks
An Armenian national extradited from Ukraine to the United States has been sentenced to federal prison for his role in Ryuk ransomware attacks that…
New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts
cPanel has patched three newly disclosed security vulnerabilities that threaten tenant isolation on shared-hosting servers, including a permissions flaw…
Critical IBM FTM Flaws Let Attackers Execute Code and Access Payment Systems
IBM has released security fixes for Financial Transaction Manager for Red Hat OpenShift after identifying multiple vulnerabilities that could enable…
AWS Lambda Flaw Lets Attackers Bypass IAM Permissions and Access Cloud Services
AWS disclosed a high-severity authorization flaw in its Amazon Connect Salesforce Lambda application that could let attackers perform privileged cloud…
Critical NEXT.JS Flaw Enables RCE Attacks Via Weaponized SVG File
A critical Next.js vulnerability, tracked as CVE-2026-94545, affects the Node.js ImageResponse implementation in the next/og package and could allow…
Fake Crypto Wallet App Spreads PamStealer Malware to Steal Mac Passwords
A fake cryptocurrency wallet download is delivering a new version of PamStealer to Mac users. The attack starts with a convincing website whose installer…
NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information
NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities that could let attackers access…
The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves
Fake verification pages are steering people toward malware, but the web addresses behind the lures keep changing. Over five months, investigators tracked…
The Phishing Kit That Turned Microsoft’s Login Flow Into an AI-Powered Fraud Machine
EvilTokens turns a Microsoft sign-in into a route to corporate email fraud. The phishing kit, first seen in February 2026, tricks people into approving an…
The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths
Malware has moved into tools developers use to build and manage cloud infrastructure. A campaign linked to Graphalgo planted a remote access program in…
A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices
A free television offer led Android users to a dangerous download. Ads for a streaming service urged them to install an app that could give criminals…