GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The…
Tag: Cyber Security News
ClickFix Fake CAPTCHA Attack Executes Malware Hidden Inside Browser Cache
A new ClickFix campaign is turning a web safety check into a route for malware. Visitors to compromised websites see a fake CAPTCHA or repair message and…
RemoveMacAI Free Up 12GB of Data by Removing Apple Intelligence Models
RemoveMacAI, an open-source tool on GitHub, lets Mac users disable Apple Intelligence, remove its downloaded models, and block future downloads. The…
Windows 11 KB5124010 Update Crashes Productivity Apps, Games and Media Players
Microsoft has confirmed a Windows 11 audio decoding bug that can cause some productivity apps, games, and media players to close without warning. The…
Denmark Data Breach Exposes Personal Records of 8.8 Million People
Denmark has confirmed a major data breach involving its Central Population Register, known as CPR, after unauthorized parties accessed personal records…
Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing
Hackers are using a legitimate ScreenConnect client to turn a payment notification into a route for remote access. Instead of delivering custom malware,…
CISA Warns of Zammad DIVD Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added two Zammad vulnerabilities to its Known Exploited Vulnerabilities catalog after…
Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains
Google has revealed an internal AI security agent that found more than 500 verified cross-site scripting, or XSS, flaws across its own web applications.…
CISA Adds Fortinet FortiMail 0-day Vulnerability to KEV Following Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Fortinet FortiMail vulnerability (CVE-2026-104286) , to its Known Exploited…
Top 10 Best Certificate Lifecycle Management (PKI) Tools in 2026 [Ranked & Scored]
An expired certificate is the outage everyone saw coming, and with public TLS marching toward 47-day maximum lifetimes, renewal frequency is about to rise…
Top 10 Best Machine Identity Management Solutions in 2026 [Ranked & Scored]
Every workload, container, and script now carries an identity, machines outnumber humans dozens to one, and unmanaged non-human and control-plane…
Top 10 Best Fine-Grained Authorization Tools in 2026 [Ranked & Scored]
Broken access control sits at 1 on the OWASP Top 10 because authorization logic scattered through if-statements always rots. We scored ten tools that…
Cybersecurity Newsletter Bulletin – Pentagon Data Breach, Citrix, Fortimail and Apple 0-days and 20+ stories
This week’s security newsletter was dominated by a Pentagon personnel data breach affecting more than three million people, actively exploited zero-days…
Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks
Citrix has released emergency security updates for a NetScaler SAML zero-day vulnerability that attackers are actively exploiting. Tracked as…
South Korean President Orders Full Security Checks After Financial Sector Hacks
South Korean President Lee Jae Myung ordered a thorough investigation on October 4, 2026, after a series of financial sector data breaches exposed…
Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000
Vercel has confirmed a KVM zero-day vulnerability after security researcher Paulos Yibelo reported a full virtual machine escape that, he says, allows…
ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers
A suspected ShinyHunters member has been detained in Jordan and is reportedly helping the FBI identify other hackers linked to the group. Reuters reported…
Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw
Microsoft has released September 2026 V2 security updates to fix an Exchange Server flaw that lets authenticated attackers access other users’ mailboxes…
Rethinking automotive cyber risk for the age of accelerated vulnerability discovery
By Tamás Pentz, Head of Threat Intelligence, PCA Cyber Security Automotive cybersecurity has traditionally focused on putting controls into vehicles that…
Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control
Dell has released security update DSA-2026-448 to address multiple critical vulnerabilities in its Container Storage Modules, including flaws that could…