News

Interpol successfully dismantled the Sniper Dz phishing platform and arrested its admin, marking a significant blow against cybercrime. The operation aimed to curb phishing attacks and protect victims. The initiative underscores global cooperation in…

Anthropic has rejected claims of a prompt-based jailbreak affecting its Claude Fable 5 AI model, asserting the strength of its advanced safety systems and extensive testing. The model, launched with cybersecurity safeguards, defaults to a less capable…

In May 2026, a report revealed that over 21,786 home cameras were streaming live video without any authentication or protection, exposing them to anyone online. Mysterium VPN conducted an analysis and identified that, of over three million accessible…

Operation TaxShadow is a sophisticated phishing campaign involving a fake tax notice that delivers in-memory malware. Initiated through a fraudulent email that mimics communication from Indian tax authorities, victims are directed to a malicious ZIP file…

Europol has successfully disrupted a cryptocurrency laundering service, identified as AudiA6, which was exploited by ransomware gangs. The operation involved international cooperation and aimed at curbing cybercrime activities. This action underscores the…

Apple has officially removed the Apple Filing Protocol (AFP) from macOS 27, signaling the end of a protocol that has been in use since 1988. AFP, once essential for file sharing on Macintosh systems, has been gradually phased out since 2013 with the…

The article highlights a significant speed increase in AirDrop transfers with iOS 27, where a 3.5GB video file transfers in just 41 seconds between iOS 27 devices, compared to 2 minutes and 11 seconds between iOS 27 and iOS 26 devices. This marks a 220%…

### Summary of Pixel Reboot Loop Bug Google's recent software updates have caused a bug affecting some Pixel device users, where entering their PIN leads to an immediate reboot, resembling a reboot loop that makes the device unusable. This issue mainly…

The page details critical security updates targeting multiple vulnerabilities within the Spring framework. Key entries include CVE-2026-10520, a command injection vulnerability in Ivanti Sentry, and CVE-2026-41003, which addresses cross-site scripting flaws…

Google has released a significant security update for Chrome, version 149.0.7827.114/.115, covering 28 vulnerabilities, with critical flaws that can allow attackers to execute arbitrary code. Key critical vulnerabilities include CVE-2026-12007,…

The article discusses critical vulnerabilities in UniFi OS that have been recently identified, urging immediate action from network administrators to patch affected Ubiquiti devices globally. Among the identified threats are severe command injection…

The article discusses recent critical security vulnerabilities discovered in AMD hardware, specifically impacting the EPYC chip systems and memory translation processes. Key vulnerabilities include: 1. **CVE-2025-54509** - A flaw affecting AMD's safe memory…

A critical security alert has been issued regarding multiple vulnerabilities found in Apache Answer. Key vulnerabilities include: 1. **CVE-2026-25688**: A cross-site scripting vulnerability allowing attackers to execute harmful scripts, risking significant…

A critical HTTP.sys RCE vulnerability (CVE-2026-47291) has been detected, posing serious risks to millions of users, with a CVSS score of 9.8. This vulnerability allows unauthorized code execution over networks due to an integer overflow error. Although no…

Two critical vulnerabilities in Spring HATEOAS have been identified: CVE-2026-41006 and CVE-2026-41007. The first allows attackers to bypass essential data checks by exploiting poor handling of Collection JSON and UBER types, potentially leading to…

Phishing attack volume has decreased by 20% across most sectors, yet the risk from these attacks is considered to be rising due to an increase in targeted, high-quality phishing attempts facilitated by AI. Zscaler's annual phishing report suggests hackers…

The article discusses new attacks targeting the OpenClaw AI agent, which have the potential to manipulate it into executing unauthorized code and disclosing sensitive information. This vulnerability raises significant concerns regarding AI security and…

The article discusses a recent vulnerability, termed "GreatXML exploit," which enables bypassing Windows BitLocker security measures via exploitation of Recovery Partition XML files. The discovery highlights significant concerns about data protection on…

The article discusses the emergence of the Gentlemen ransomware, which has reportedly claimed 478 victims and exhibits worm-like propagation abilities, allowing it to spread rapidly across networks. It highlights the increasing threat of ransomware in the…

The article discusses the emerging threats posed by the Miasma and Hades worms, which are currently infiltrating npm and PyPI ecosystems by executing malicious code upon project open and package import. Unlike traditional threats that rely on install times,…

A German court ruled that Google can be held liable for defamatory claims produced by its AI Overviews, asserting that disclaimers about verifying AI-generated results are insufficient to escape liability. The ruling arose after two publishers were falsely…

The Cybersecurity and Infrastructure Security Agency (CISA) has directed U.S. federal agencies to adopt a risk-based approach to managing vulnerabilities, prioritizing patches based on threats actively exploited. This new operational directive, BOD 26-04,…

The article discusses the challenges of operational technology (OT) security, particularly emphasizing the importance of network segmentation to protect against cyber threats. While segmentation strategies are recommended, their effectiveness depends on…

OnyxC2 is a new Malware-as-a-Service (MaaS) that provides enterprise-grade data theft capabilities for $250 to $6,000, depending on the package. It targets over 210 applications, including browsers, email clients, and password managers, by using DLL…

Criminal IP, a cyber threat intelligence platform, showcased its capabilities at Infosecurity Europe 2026, unveiling AITEM (AI-based Threat Exposure Management), a new framework aimed at enhancing Attack Surface Management (ASM). This framework emphasizes…

Cybercriminals are utilizing fake AI study guides to distribute AsyncRAT malware, as reported by Fortinet. This attack targets Windows users through disguised files claiming to be learning resources. The malware executes multi-stage attacks that utilize…

The article discusses the phenomenon of alert fatigue in Security Operations Centers (SOCs), which arises from the overwhelming volume of alerts generated by security systems. Key contributions to alert fatigue include the lack of automated prioritization…

The article discusses critical vulnerabilities identified in LangGraph, an open-source framework designed for stateful AI agents. Key points include: 1. **Vulnerability Identification**: Check Point Research highlighted three vulnerabilities in LangGraph's…

The article announces the winners of the Cybersecurity Stars Awards 2026, which recognizes excellence and innovation in the cybersecurity field across 95 categories. It emphasizes the importance of advancements in cybersecurity technologies and practices.…

The ThreatsDay Bulletin from The Hacker News highlights several critical cybersecurity updates as of June 11, 2026. Noteworthy points include the leak of worm code, a phishing incident targeting an AI agent, and the release of a patch for Claude action…

The US Cybersecurity and Infrastructure Security Agency (CISA) has announced a new directive, BOD 26-04, which requires federal agencies to focus on patching high-risk security flaws, building on previous guidance established with BOD 22-01 and the Known…