News

The article discusses a critical security vulnerability named CIFSwitch local root exploit, published by security researcher Asim Manizada. This flaw allows low-privileged local users to gain full root access in Linux systems, affecting several popular…

The article discusses a recent cybersecurity threat identified as JINX-0164, which targets cryptocurrency firms by using fake recruiter tactics and deploying macOS malware. This ongoing supply chain attack aims to exploit individuals in the cryptocurrency…

Research by Mysterium VPN reveals that 19.6 billion files are publicly accessible due to misconfigured cloud storage buckets across major platforms like AWS, Google Cloud, and Azure. This includes 685K credential files and almost 1M database dumps,…

The article discusses the resilience of Nordic CISOs in the face of rising cyber threats. Despite an increase in the volume and aggressiveness of cyberattacks globally, the majority of CISOs in northern Europe report no significant rise in severe incidents…

The article discusses a cybercrime campaign distributing malware via illegal streaming sites for movies and TV shows. The malware is hidden within a fake update for a video player plugin and is executed through a DLL side-loading mechanism. The distribution…

The content discusses a significant cyber threat known as the CypherLoc scareware kit, which is part of a large campaign targeting users through deceptive phishing tactics. Malicious actors have conducted about 2.8 million attacks since early 2026, using…

The content discusses various updates and issues related to OpenAI's GPT models. It highlights dissatisfaction from developers regarding the GPT-5.5 model, with concerns over cognitive capability and increased processing latency. Several legacy models,…

Security researchers have uncovered a critical memory corruption flaw in a core Microsoft networking component. Specifically, this dangerous

IBM has issued an urgent security bulletin addressing a critical vulnerability in its Jazz Foundation platform, identified as CVE-2026-3660, with a severity score of 9.8. This flaw allows remote attackers to bypass authentication checks, enabling…

Veeam has issued urgent updates to address critical security vulnerabilities in its backup and management tools. Notable vulnerabilities include CVE-2026-32998, a critical remote code execution (RCE) issue discovered in the Veeam Service Provider Console,…

The page discusses recent changes to OpenAI's subscription tiers, particularly focusing on the mid-tier plan priced at $100 per month. It highlights a promotional campaign that doubled usage quotas, but this promotion will end soon, reducing the allocation…

The Roundcube development team has released critical security updates for Roundcube Webmail versions 1.6.16 and 1.7.1 to fix severe vulnerabilities. Key issues addressed include a pre-authentication SQL injection (CVE-2026-48842, CVSS 8.1) affecting the…

The page provides an update on the threat level, which is currently green, indicating a low threat environment. It features a handler named Manuel Humberto Santander Pelaez and highlights the ISC Stormcast for Thursday, May 28th, 2026. Further information…

The page discusses a major security vulnerability labeled CVE-2026-9277 that affects a popular npm package, shell-quote. This vulnerability can lead to command injection due to improper handling of newline characters in the token validation process. Affected…

The article discusses a critical vulnerability discovered in Kata Containers, tracked as CVE-2026-47243. This flaw allows malicious users to escape a virtual machine sandbox, potentially executing commands on the host system. Key points include: 1.…

The page discusses a critical security vulnerability (CVE-2026-46529) found in Atril, a document viewer for Linux systems, allowing attackers to execute arbitrary commands through a specially crafted PDF. This remote code execution (RCE) flaw affects…

The article "Out of the Crypt: The Evolving Cyber Extortion Economy" discusses the shift in cyber extortion tactics due to advancements in data recovery and compliance pressure, leading criminals to move away from ransomware towards pure data theft without…

Catalin Dragomir, a 45-year-old Romanian hacker, was sentenced to 4 years and 8 months in a U.S. prison for selling unauthorized access to an Oregon state emergency management network. Dragomir gained access in June 2021 and marketed it online for a $3,000…

The content discusses the reconstruction of an Akira ransomware kill chain from perimeter and endpoint logs within a mid-sized organization, emphasizing the importance of integrating log sources from firewalls and Windows events. It outlines the phases of…

Websites now employ a new technique called FROST (fingerprinting remotely using OPFS-based SSD timing) to monitor visitors by analyzing their interactions with solid-state drives (SSDs). This method exploits a side channel that measures SSD I/O latency to…

The Silent Ransom Group (SRG), a ransomware actor, is increasingly targeting law firms using social engineering tactics, including impersonating IT personnel to gain access to sensitive data. The FBI has warned about their methods, which include phishing…

Anne Keast-Butler, the director of GCHQ, emphasizes the growing threat from Russia and the urgent need for enhanced cybersecurity measures in response to AI's rapid development. In a recent speech, she warned that AI is being weaponized and that Britain is…

On May 26, 2026, Iran's vice president announced partial restoration of Internet access after a two-month shutdown due to military conflicts. Cloudflare Radar data showed increased traffic and DNS queries starting from 11:00 UTC, indicating recovery. The…

The article discusses the increasing cyber threats from Latin American cybercriminals targeting government agencies, with a notable case involving a breach of 5.8 million records of Uruguayan citizens. Groups like La Pampa Leaks and the Chronus Group are…

New research indicates that AI-assisted exploit development has significantly accelerated the time required for attackers to create working exploits for known vulnerabilities (CVEs), dropping from approximately 125.3 days to just 0.5 days. This research,…

The article discusses recent cybersecurity threats posed by Grandoreiro malware and BTMOB RAT campaigns, which specifically target Windows and Android users. These malware strains are associated with financial fraud, highlighting the growing risks in digital…

The article discusses a cybersecurity incident where a malicious npm package infiltrated the Claude AI user directory via GitHub, resulting in file theft. The report emphasizes the vulnerabilities within supply chain attacks and urges users to be vigilant…

Researchers at Novee Security identified a critical vulnerability in the Pretalx platform, a commonly used tool for managing conference submissions. This stored XSS vulnerability, tracked as CVE-2026-41241, allows registered speakers to execute malicious…

CrowdStrike, Google, and the Shadowserver Foundation successfully disrupted the Glassworm botnet by taking down all four of its command-and-control channels simultaneously, which included both traditional servers and stealthy methods like utilizing Google…

The article discusses a cyber attack on the LA Metro attributed to an Iranian group called Ababil of Minab, linked to Iran's intelligence service (MOIS). In March 2026, this group claimed responsibility for breaching LA Metro, wiping out terabytes of data…

The article discusses the urgent issue of burnout among cybersecurity professionals, emphasizing its classification as a critical risk rather than merely a wellness concern. Research from Cybermindz reveals that many cyber professionals experience…

SecurityWeek is set to host the 2026 Artificial Intelligence (AI) Risk Summit on August 11-12 at Ritz-Carlton, Half Moon Bay, CA. This event, now in its third year, will gather CISOs, security leaders, AI researchers, and risk professionals to discuss AI…

Researchers at Cisco have warned that major large language models (LLMs) like OpenAI’s ChatGPT and others are vulnerable to multi-turn manipulation, where users can exploit ongoing conversations to bypass safety guardrails. This study evaluated various AI…