SolarWinds released Observability Self-Hosted 2026.2.3 to fix two serious vulnerabilities that could let unauthenticated attackers remotely execute code…
Tag: Cyber Security News
AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse
Cyberattacks are increasingly built around familiar actions: signing in, approving a payment, or using a trusted app. Artificial intelligence can help…
This Malware Doesn’t Wait for Hackers—It Asks AI Models What to Do Next
A Windows malware sample called CLOSEDQUORUM can choose its next move without waiting for an attacker to send instructions. Once configured and deployed,…
Critical WordPress Core Vulnerability Lets Attackers Execute Code Without Logging In
WordPress has released version 7.1.2 to address a critical security vulnerability that could allow unauthenticated attackers to execute code on vulnerable…
WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected
A newly identified WordPress malware strain is using a hidden plugin, stolen administrator access, and a blockchain-based command channel to remain active…
Top 10 Best Decentralized Identity Solutions in 2026 [Ranked & Scored]
EU digital identity and GDPR compliance mandates, deepfake-driven fraud in authentication and verification, and credential-reuse fatigue pushed…
Top 10 Best Secrets Management Tools in 2026 [Ranked & Scored]
Machine identities now outnumber humans many times over, and a single API key in a public repo can undo a security program. We scored ten secrets managers…
ChatGPT Computer History Feature Creates New Attack Surface for macOS Infostealers
A new feature in ChatGPT now records your actions on your Mac, creating a detailed, plain-text diary of your work. This unencrypted log is vulnerable to…
Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access Through Windows Login Screen
ManageEngine has fixed a critical remote code execution vulnerability in ADSelfService Plus that could allow an unauthenticated attacker to run code as NT…
Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution Attacks
Google has released Chrome 154 for Windows, macOS, and Linux, fixing 108 security vulnerabilities, including several critical memory-safety flaws that…
ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data
The FBI is investigating alleged unauthorized activity affecting its recruitment infrastructure after the ShinyHunters cybercrime group claimed it…
Hackers Exploiting F5 BIG-IP OAuth Server 0-day Flaw to Gain Remote Code Execution
F5 has warned that hackers are actively exploiting a critical zero-day vulnerability in BIG-IP Access Policy Manager (APM) deployments to execute code…
Scaling SOC Capabilities: How Threat Intelligence Cuts Triage Time and Burnout
A suspicious IP, unfamiliar domain, or file hash can trigger an investigation in seconds. Understanding what that indicator means can take much longer. An…
Check Point Management Server 0-Day Vulnerability Actively Exploited in Attacks
Check Point has warned customers that attackers are exploiting a critical zero-day vulnerability in its Security Management infrastructure. Tracked as…
CAIRN – A New Tool to Track AI Malware That Operates Without Human Control
Cisco Talos has released CAIRN, an open-source toolkit designed to hunt, classify, and track AI-integrated malware by examining the digital markers…
Autonomous AI Agents Hack Retailers for $25 and Steal 600,000 Credit Cards
A financially motivated operator has been running three open-source AI tools against many online retailers, mostly without supervision. The results are…
New TASK#STOMP Backdoor Uses PowerShell to Steal Documents and Wi-Fi Passwords
TASK#STOMP is a newly analyzed Windows backdoor that turns ordinary built-in tools into a durable spying operation. It uses a Visual Basic Script…
Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges
Microsoft has confirmed a high-severity remote code execution vulnerability in on-premises SharePoint Server that lets an authenticated, low-privileged…
BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files
BambooToken is a Linux backdoor that turns a lightweight messaging protocol into a remote control channel. The newly analysed sample can collect…
Red Hat OpenShift Flaw Lets Attackers Bypass PGP Checks and Push Malicious Releases
Red Hat has disclosed an Important security vulnerability in the OpenShift oc-mirror tool that could allow attackers to bypass PGP signature verification…