A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-89775, could let attackers escape an ARM64 virtual machine and access the underlying…
Tag: Cyber Security News
Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows
A critical local privilege escalation flaw in Veeam Agent for Microsoft Windows is drawing attention after public proof-of-concept exploit code became…
Context Bombs Trick Autonomous Qwen AI Agents Into Stopping Cyberattacks
A hidden “context bomb” prompt in a cloud decoy can disrupt AI agents and force Qwen3.8-27B to stop simulated attacks. The technique worked against both…
GHAPPIER Supply Chain Attack Compromises 65 GitHub Repositories and Poisons npm Package
A newly uncovered software supply chain attack has shown how quickly a trusted developer account can become a delivery route for malware. The operation,…
Hackers Exploit WordPress Flaws to Steal 18,566 Government Records and Plaintext Passwords
A suspected Chinese-speaking threat actor has used WordPress vulnerabilities to break into at least 49 organizations across 29 countries. The campaign…
Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits
Hackers are using convincing copies of trusted websites to turn an ordinary browser visit into a full Windows compromise. The campaign pairs targeted…
Aikido Security Unveils Altar-1 Open-Weight AI for Cybersecurity Defense
Aikido Security has unveiled Altar-1, an open-weight artificial intelligence model designed to run defensive cybersecurity workloads entirely inside an…
Top 10 Best Passwordless Authentication Solutions in 2026 [Ranked & Scored]
The password’s obituary has been written for a decade, but 2026 is the year the funeral actually gets scheduled: platform passkeys are mainstream,…
CISA Warns of Zyxel GS1900 Switches Flaw Actively Exploited in Attacks
CISA added CVE-2026-7273, a critical stack-based buffer overflow in the CGI program of Zyxel GS1900 Series Switches, to its KEV catalog after confirming…
Top 10 Best Customer Identity & Access Management (CIAM) Solutions in 2026 [Ranked & Scored]
Customer identity is where security meets revenue: every point of login friction costs conversions, while every authentication gap invites account…
ZTE SmartLife Flaws Let Attackers Hijack Accounts by Resetting Passwords Without Verification
ZTE has addressed four vulnerabilities in its SmartLife mobile application following the discovery of critical weaknesses that allowed attackers to…
Vidar Malware Rewrites Its Obfuscation With Every Build to Make Detection Harder
Vidar has spent years stealing the data people keep closest: saved passwords, browser cookies, wallet files and system details. Now its operators have…
Hackers Steal NTDS.dit to Dump Active Directory Password Hashes and Forge Golden Tickets
Threat actors that gain a foothold in a Windows network are increasingly aiming for the domain controller, the server that manages identities and…
Top 10 Best Identity Threat Detection & Response (ITDR) Tools in 2026 [Ranked & Scored]
The modern breach doesn’t kick the door in it signs in. Stolen sessions, abused service accounts, and helpdesk-reset social engineering made identity the…
D-Link Router Hit by CVSS 10.0 Flaw Exploitable Remotely Without Authentication
D-Link Systems has disclosed that it is investigating a critical security vulnerability in its DIR-822A router, tracked as CVE-2026-86296. The flaw has…
Windows COM Flaw Lets Attackers Gain SYSTEM Privileges With a Malicious DLL
A newly detailed Windows privilege escalation flaw tracked as CVE-2026-66804 allowed a standard, low-privileged user to plant a malicious DLL and execute…
Hackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords
Hackers are abusing Microsoft Teams chats to impersonate IT help desk staff, trick employees into installing malware or granting remote access, and steal…
Meta’s Muse AI Agent 0-Day Vulnerability Allows Attackers to Hijack the Tool and Inject Malware
A zero-day vulnerability in Meta’s Muse AI agent for macOS could allow malware already running under a user account to hijack the assistant, intercept…
Claude Code Agent Allegedly Deletes 48,000 Files in 103 Seconds
A Claude Code user has reported a severe data-loss incident in which an autonomous coding agent allegedly deleted 48,218 live files from a Windows project…
AWS Automatically Quarantines Exposed IAM Keys Within 10 Seconds of GitHub Leak
Amazon Web Services can move from detection to containment in seconds when an Identity and Access Management access key appears in a public GitHub…