UNC6671 is carrying out data theft campaigns that begin with a phone call. The group poses as an IT helpdesk, claiming an urgent security migration is…
Tag: Cyber Security News
Papyrus Mobile Ad Fraud Uses Hidden WebViews to Fake Clicks, Scrolls and Attention
Papyrus is a mobile ad fraud operation hiding behind apps built for reading serialized fiction. While people turn pages and follow stories, the apps can…
Shai-Hulud CHAINDROP Worm Backdoors 400+ npm Packages With 1.3 Billion Monthly Downloads
Shai-Hulud is back in the npm ecosystem, and this time its reach is unusually broad. A new self-propagating malware strain called CHAINDROP has backdoored…
Multiple Flaws in Enterprise Java Platforms Allow Attackers to Execute Remote Code
Enterprise Java platforms remain attractive targets because middleware often exposes paths developers assumed were internal. New research presented for…
Zbtlink Chinese Router Sold Worldwide Contains a Hidden Backdoor Affecting 20+ Models
Zbtlink routers sold in global markets have been found carrying a hidden remote-control implant that starts with the device. The discovery affects…
Kimi K3 AI Model Escapes Sandbox During Security Test to Fetch Answers
Moonshot AI’s open-weight model Kimi K3 broke out of its isolated testing sandbox during a cybersecurity evaluation and reached the open internet,…
OpenAI Expands GPT-5.6 Access to Free & Go Users With Unlimited Text Chats
OpenAI has announced a major expansion of ChatGPT access, rolling out its updated GPT-5.6 models to Free and Go tier users while removing text chat limits…
Top 10 Best DNS Security Solutions in 2026
Nearly every attack touches DNS the phishing click, the malware callback, the exfiltration tunnel which makes the DNS layer the cheapest place to break…
Anthropic Updates Claude Fable 5’s Biology Safeguards to Reduce False Positives
Anthropic has rolled out a major update to Claude Fable 5’s biology safety classifiers, cutting biology-related “fallbacks” by roughly 85% across its…
Top 10 Best Network Detection & Response (NDR) Tools in 2026
Attackers who slip past the endpoint still have to cross the network NDR is how you catch them there. Darktrace is our top pick for 2026 on the strength…
Top 10 Best Protective DNS (PDNS) Services in 2026
Protective DNS went from best practice to expectation: NSA and CISA jointly recommend it, national programs run it at population scale, and it remains the…
Top 10 Best Network Traffic Analysis (NTA) Tools in 2026
“What’s on the network, who’s talking to whom, and is that normal?” network traffic analysis answers the questions every security and network team keeps…
SilverFox Hijacks Trusted Software and Kernel Drivers to Disable Security Tools
SilverFox has expanded its malware toolkit in a campaign that targeted a Japanese industrial manufacturer. The attackers used a fake invoice email to lure…
Top 10 Best Firewall Management Tools in 2026
Most firewall breaches aren’t firewall failures they’re rule failures: shadowed policies, forgotten any-any entries, changes nobody risk-checked. Firewall…
Critical Paperclip Vulnerabilities Allow Attackers to Gain Admin Access
Critical vulnerabilities have been disclosed in Paperclip, an AI agent orchestration platform, that could allow attackers to gain administrative access…
4,400+ Internet-Exposed Rockwell PLCs Expose Water Systems to Cyberattacks
A wave of cyberattacks against U.S. water and wastewater utilities has renewed alarm over how many industrial controllers remain directly reachable from…
Top 10 Best Intrusion Detection & Prevention (IDS/IPS) Tools in 2026
An IDS detects malicious activity and alerts; an IPS sits inline and blocks it. Cisco Secure IPS is our top pick for 2026 on the strength of Snort 3 and…
Hackers Can Leverage WSUS Servers to Deliver Malware and Compromise Enterprise Endpoints
A novel attack chain that allows adversaries to hijack Windows Server Update Services (WSUS), the trusted patch-management architecture widely deployed…
Vanta Stealer Empties Browser Vaults, Crypto Wallets and Gaming Accounts in Minutes
Vanta Stealer is a newly analyzed information-stealing malware built to strip valuable data from an infected computer quickly. It reaches far beyond saved…
Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks
A repeatable vulnerability pattern across AI coding agents from Anthropic, Google, and OpenAI that allows attackers to achieve remote code execution,…