Researcher Chaotic Eclipse has claimed to have discovered a zero-day privilege-escalation vulnerability affecting Avast Antivirus and released a public…
Tag: Cyber Security News
Phantom Deal Hackers Impersonate Executives and Use Fake NDAs to Steal Corporate Wire Transfers
Cybercriminals are using fake acquisition deals to steer employees toward large wire transfers. The campaign, called Phantom Deal, begins with a…
LLMjacking Attack Uses Leaked AWS IAM Key to Steal Paid AI Model Access
A newly documented cloud intrusion shows how quickly attackers can turn a single leaked AWS credential into a revenue stream by hijacking access to…
OpenAI Investigates Elevated Errors Affecting ChatGPT and Codex Services
OpenAI has reported an ongoing service incident involving elevated errors across ChatGPT and Codex, with the company confirming that it is investigating…
Hackers Weaponize ScreenConnect to Spread Worm-Like Malware Across Windows Systems
Hackers are turning rogue remote-support installations into a tool that can spread malicious code between Windows computers. The activity stands out…
Hackers Use QR Codes With No Images to Bypass Email Security
Hackers are using QR codes without image files to slip past email defenses. The tactic turns email markup into a scannable code, routing recipients to a…
Microsoft to Expand Memory Integrity Protection Across Windows Devices
Microsoft will begin expanding memory integrity protection across eligible Windows devices in October 2026, automatically enabling a stronger kernel-level…
3 High-Severity HP Easy Start Flaws Let Attackers Escalate Privileges on macOS
Three high-severity vulnerabilities in HP Easy Start for macOS could allow attackers to interfere with printer-software installation workflows and…
New StreamRAT Android Trojan Gives Hackers Full Remote Control Through VNC and Accessibility
StreamRAT is a new Android banking trojan that gives criminals broad control of an infected phone. It pairs streaming offers with screen viewing, remote…
Microsoft Teams, Outlook Crashes Following August 2026 Updates on ARM-Based Devices
Microsoft has confirmed a known issue causing Microsoft Teams and the new Outlook for Windows to crash or fail to launch on ARM-based PCs after installing…
Critical VMware Workstation and Fusion Vulnerabilities Allow Attackers to Execute Code on the Host
Broadcom has issued a critical security advisory warning that two newly disclosed flaws in VMware Workstation and Fusion could let attackers break out of…
Hackers Actively Exploiting Sangoma Switchvox VoIP Platform RCE Flaw in Attacks
A critical vulnerability in Sangoma Switchvox is being actively exploited, affecting the enterprise VoIP platform used to manage business phone systems,…
Hackers Turn Trusted Node.js Runtime Into Malware Launcher in Ransomware-Linked Attacks
Cybercriminals are increasingly hijacking Node.js, the widely used JavaScript runtime, to slip malicious code past security defenses, according to new…
CISA Warns of SonicWall SMA1000 Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added two SonicWall SMA1000 appliance vulnerabilities to its Known Exploited Vulnerabilities…
Cisco Nexus 9000 Series Switches Flaw Allows Remote Attackers to Execute Malicious Code
Cisco has disclosed a critical vulnerability in Cisco Nexus 9000 Series Switches that could allow an unauthenticated remote attacker to execute arbitrary…
The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours
The Gentlemen ransomware operation is moving from access to full network encryption at striking speed. In some intrusions, attackers disabled defenses and…
VPN Is the Biggest Backdoor Into Your Plant — Here’s What Should Replace It on Your OT Network
Every industrial organisation now lets someone in from the outside — OEM vendors, system integrators, remote engineers. How they get in determines whether…
WordPress Plugin Flaw Exposes 5 Million Sites to SQL Injection Attacks
A high-severity vulnerability in the All-in-One WP Migration and Backup plugin could allow unauthenticated attackers to take over vulnerable WordPress…
Malicious Apache Modules Turn Trusted Government Websites Into Stealth Phishing Proxies
Brazilian government websites have been quietly turned into gateways for phishing pages on trusted public domains. Rather than sending victims to obvious…
Researcher Claims CrowdStrike Falcon 0-Day Privilege Escalation Vulnerability
A security researcher known as Nightmare-Eclipse, who also goes by the names Chaotic Eclipse and MSNightmare, has released a project that claims to take…