Attackers are exploiting a significant portion of vulnerabilities even before defenders receive a published CVE (Common Vulnerabilities and Exposures). In…
Tag: Cyber Security News
New CosmosEscape Vulnerability Lets Attackers Take Over Azure Cosmos DB Instances
A critical vulnerability, dubbed CosmosEscape, in Microsoft Azure Cosmos DB could have let attackers seize control of virtually every database hosted on…
Fake Flash Player Installer Uses Microsoft-Themed Certificate to Deploy AtlasRAT
AtlasRAT is being delivered through a fake Flash Player installer that looks harmless but can give attackers remote control of a Windows computer. The…
Fake N26 Support Calls Deploy Copybara Android RAT to Control Banking Apps
A new fraud campaign is targeting Android banking users through convincing phone calls that impersonate N26 support staff. The attack begins as voice…
Node.js Fixes 11 Security Flaws That Can Crash Servers and Break Filesystem Restrictions
The Node.js project has released important security updates addressing 11 vulnerabilities across its active branches: 22.x, 24.x, and 26.x. The updates…
Developer Claims Claude Opus 5 Wiped an Entire Production Database in Minutes
A developer has reported that Anthropic’s Claude Opus 5, running in Ultracode mode, accidentally wiped an entire production database in roughly ten…
Inside the Cybercrime Platform That Turns Helpdesk Calls Into Enterprise Account Takeovers
Voice phishing is no longer limited to a convincing phone call and a fake sign-in page. A newly examined criminal platform called Work Panel brings target…
GitLab Fixes 13 Security Flaws That Can Leak Data, Alter Pipelines, and Crash Servers
GitLab has released critical security updates to address 13 vulnerabilities that could potentially expose sensitive data, manipulate CI/CD pipelines, and…
Claude Worldwide Outage Disrupts Users With “Request Failed With 529 Overloaded” Message
Anthropic’s Claude AI platform suffered a worldwide outage on July 29, 2026, causing failed prompts, slow responses, interrupted conversations, and…
Linux Cryptomining Campaign Weaponizes PAM to Hide XMRig Botnet Activity
A new Linux cryptomining campaign has surfaced using a rare trick to stay hidden inside compromised networks. Instead of behaving like typical malware,…
A Two-Minute Microsoft Teams Call Could End With Your Network Encrypted With Ransomware
A short Microsoft Teams call can now become the first step in a ransomware attack. Attackers posing as IT support staff are persuading employees to grant…
Cisco Firewall Management Center 0-Day Actively Exploited to Access Sensitive Data
Cisco has released security updates for an actively exploited zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) Software. This…
TA488 May Have Exploited Outlook Web Access 0-Day Flaw Before Microsoft’s Emergency Patch
TA488 has been linked to a new campaign that turns a routine Outlook Web Access email into a gateway for mailbox compromise. The operation abused a…
North Korean Hackers Turn Trusted npm Packages Into a Gateway for Supply-Chain Attacks
North Korean-linked hackers are turning trusted npm packages into an entry point for widespread software supply-chain attacks. By compromising the…
Microsoft Word Copilot Vulnerability Turns Hidden Prompts Into Self‑Propagating AI Worms
A new vulnerability in Microsoft Copilot for Word shows how hidden prompts inside documents can transform routine editing into a self‑propagating “AI…
Critical Rails Flaw Lets Attackers Read Arbitrary Files and Execute Malicious Code Remotely
A severe security vulnerability in Ruby on Rails Active Storage tracked as CVE-2026-66066 can let unauthenticated attackers read sensitive files from a…
AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser
AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where…
Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records
Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company…
Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page
A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702.…
Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages
Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The…