News

The pgAdmin 4 tool has three critical vulnerabilities (CVE-2026-12046, CVE-2026-12045, CVE-2026-12048) leading to high-severity threats, including remote code execution and unauthenticated access, all rated above CVSS 9.0. These security flaws allow for…

FreeBSD has addressed a critical security flaw designated as CVE-2026-45257, which allows any unprivileged user to gain local root access due to a vulnerability in the Kernel TLS (kTLS) receive path. This vulnerability exists in versions 13.0 through 13.4,…

The Security Affairs Malware Newsletter Round 102 highlights various significant malware-related incidents and research, including a supply chain attack affecting 1.2 million sites, targeted attacks from a China-based threat actor on the medical community,…

The Security Affairs newsletter Round 582 presents key cybersecurity topics and incidents as of June 21, 2026. Highlights include articles on the Gentlemen ransomware and its exploitative tactics, the FortiBleed global credential-spraying operation, CISA…

QNAP has addressed 14 vulnerabilities across its QTS, QuTS hero, QuTS cloud, and QVP systems. The issues include command injection, credential theft, and denial-of-service bugs. Notably, some command injection vulnerabilities allow authenticated users to…

Socket Threat Research has identified a new npm package named "shai_hulululud" that actively tests AI malware scanner evasion techniques. The package primarily targets AI-based malware scanners, employing methods like prompt injection and context flooding to…

Cybercriminals are exploiting vulnerabilities in ArcGIS Account Recovery configurations to gain unauthorized access to customer environments. Esri warns that hackers are bypassing multi-factor authentication by targeting weak built-in accounts, compromising…

The article discusses "The Gentlemen," a ransomware group known for its sophisticated tactics, particularly its centralized EDR-killer suite called GentleKiller. Developed for affiliates, this framework contains eight variants that impersonate legitimate…

The article discusses a security vulnerability in the Gravity SMTP WordPress Plugin that has been exploited by hackers to expose sensitive API keys. It highlights the importance of addressing vulnerabilities promptly to protect user data. This incident…

French President Emmanuel Macron urged wealthy democracies to collaborate on regulating advanced artificial intelligence (AI) systems during a recent high-level meeting with top AI executives. Macron highlighted the necessity of international partnerships to…

The article discusses the 'FortiBleed' operation, a large-scale credential-spraying attack on Fortinet FortiGate SSL VPN devices and MSSQL servers, which occurred in June 2026. Led by a multi-operator crew, the attack involved automated attempts to log in…

CISA has issued an alert regarding the FortiBleed incident, which has leaked credentials for approximately 74,000 Fortinet devices, including firewalls and VPN gateways. Attackers are actively exploiting these credentials globally, targeting both government…

The article from Unit 42 details a large-scale credential theft and password spraying campaign targeting Fortinet and other devices, termed 'FortiBleed.' This attack involves actors leveraging a curated password list derived from previous breaches to perform…

A new phishing technique, uncovered by ReversingLabs, exploits Microsoft 365 accounts without requiring passwords. Instead of fake login pages, attackers use a legitimate Microsoft sign-in process, leveraging OAuth 2.0 Device Authorization Grant flow.…

Security researchers identified GlassWASM malware embedded in two trojanized Visual Studio Code extensions listed on the Open VSX marketplace. The malicious packages, `exargd/vsblack@0.0.1` and `noellee-doc/flint-debug@0.1.1`, were uploaded by a newly…

A coordinated 8-month supply chain attack on the JetBrains Marketplace led to the exposure of API keys from approximately 70,000 developers. Fifteen malicious plugins masqueraded as legitimate AI tools, embedding credential-stealing code that exfiltrated…

The article discusses the unpatchable 'usbliter8' exploit that undermines the SecureROM boot chain of Apple A12 and A13 chips, posing significant security vulnerabilities. This exploit allows unauthorized access that is difficult to mitigate, highlighting…

The article discusses the emergence of the Gentlemen Ransomware-as-a-Service (RaaS), utilizing the GentleKiller EDR framework, which targets approximately 400 security processes. It highlights the increasing sophistication of cyber threats, particularly in…

A recent law enforcement action named Operation Endgame successfully dismantled the SocGholish malware operation, which has been distributing fake software updates since 2017. Authorities cleaned nearly 15,000 infected WordPress sites and took down 106…

The article discusses the AutoJack Attack, a vulnerability that allows a web page to hijack an AI agent for code execution on the host system. This security threat highlights the risks associated with AI-driven systems, particularly in the context of…

This week's cybersecurity roundup includes critical updates such as: a 10-year-old phpBB flaw allowing session hijacking, Velvet Ant's stealth operations in air-gapped infrastructures, vulnerabilities in Chrome extensions impacting over 10 million users, and…

The article titled "Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites" discusses a significant cybersecurity operation that effectively dismantled the servers associated with the SocGholish malware. This operation led to the…

Gcore provided DDoS protection to Ucom, a leading Armenian telecommunications provider, during the 2026 parliamentary elections to ensure the stability of public live broadcast services. Ucom faced risks of Layer 3 and Layer 4 DDoS attacks, which could…

CISA has issued a warning regarding the vulnerability known as FortiBleed, which has impacted 86,644 FortiGate devices. The vulnerability emphasizes the importance of patch management and cybersecurity vigilance. Organizations using Fortinet products are…

On June 18, 2026, a coordinated international law enforcement operation, 'Operation EndGame,' successfully disrupted the SocGholish malware distribution network. The operation resulted in the takedown of 106 servers and remediation of 14,971 compromised…

The eFAQ investigation reveals a coordinated reputation attack aimed at manipulating brand perception in search results and AI-assisted platforms. The campaign involved the creation of multiple accounts that posted identical negative claims about…

Chief Information Security Officers (CISOs) are facing increasing pressures due to the complexity of cyber threats and the advent of AI technologies. A survey by ISSA and Omdia reveals that 68% of cybersecurity professionals find their jobs more challenging…

Cloudflare has introduced Temporary Cloudflare Accounts for AI agents to facilitate smoother deployments without traditional signup processes. Agents can deploy websites and APIs instantly using the `wrangler deploy --temporary` command, which creates a…

The article discusses the evolution of AI in cybersecurity, transitioning from assistive to agentic roles in threat management. It highlights how agentic AI can autonomously identify and mitigate cyber threats, thereby enhancing security solutions. Key…

Apple has addressed a critical Bluetooth vulnerability, tracked as CVE-2025-20701, affecting Beats Studio Buds that could allow attackers to eavesdrop on users via the earbuds' microphones. This flaw relates to improper verification during the pairing…

Microsoft has issued a warning about a new malware called CryptoBandits, which targets Windows systems to steal cryptocurrency. The malware operates by using a lightweight backdoor, facilitating remote code execution, and data exfiltration. It has been…

Amazon Web Services (AWS) recently launched 'Continuum', an AI-powered vulnerability management platform designed to assist security teams in managing the lifecycle of code vulnerabilities from discovery to remediation. Announced during the AWS Summit in New…

CISA is urging organizations to secure their Fortinet devices due to the FortiBleed campaign, which has compromised over 86,000 firewalls and VPNs. This campaign involves a Russian-speaking threat actor who has compiled a database of working credentials from…