News

The article discusses a significant cloud DNS takeover campaign conducted by a suspected Chinese operator, targeting 163 organizations across various sectors, including government and healthcare. The attack involves SEO poisoning by exploiting abandoned…

The article discusses a malicious campaign utilizing VBScript via WhatsApp, where attackers employ fake documents to install the ManageEngine Remote Monitoring and Management (RMM) tool. This tactic involves social engineering, targeting unsuspecting users…

Google's Android developer verification program, announced in 2025, mandates valid developer signatures for sideloaded apps to combat fraud. Despite criticism regarding the potential threat to Android's open ecosystem, Google emphasized safety, introducing a…

OpenAI has introduced GPT-5.5-Cyber to enhance cybersecurity efforts by assisting defenders in patching security vulnerabilities effectively. The innovation aims to leverage AI to help organizations safeguard against cyber threats more efficiently. Key…

Tata Electronics, part of India's Tata Group, has confirmed a recent cyberattack during which hackers claimed to have stolen confidential documents related to Apple and Tesla. The group World Leaks published over 630GB of data, containing more than 200,000…

Apple is deprecating the AirPort Utility application as part of a broader dismantling of its legacy ecosystem, following the termination of Time Capsule support. With iOS 27 and macOS 27, the AirPort Utility will not be available for new downloads from the…

Apple has released iOS 27 Developer Beta 2, focusing on refinements and introducing several new features. Key updates include an expanded Apple Wallet Insights feature, a new 'Write with Siri' option on the keyboard, improved Siri performance, stable iPhone…

The article discusses CVE-2024-40766, a severe vulnerability in SonicWall's SonicOS affecting firewall access controls. Despite patches being available, many organizations fail to implement essential post-patch configurations, leaving themselves vulnerable…

The Codex v0.142.0 update addresses a significant issue where persistent low-level logging was damaging solid-state drive (SSD) lifespans due to excessive writes. Initially reported in April, the Codex team implemented an immediate fix following developer…

Tinyproxy has three critical vulnerabilities (CVE-2026-54388, CVE-2026-54387, CVE-2026-55202) that could allow attackers to exploit HTTP request smuggling techniques. These flaws have a maximum CVSS severity score of 9.3 and can lead to request hijacking,…

The content is a summary of a cybersecurity diary entry from the ISC (Internet Storm Center). The handler on duty is Manuel Humberto Santander Pelaez, and the threat level is categorized as green, indicating low risk. It includes links to learn more about…

The content details a critical vulnerability in libssh2, tracked as CVE-2026-55200, with a CVSS score of 9.2. This flaw allows remote code execution through an out-of-bounds write due to unchecked packet length in the transport layer. All versions of libssh2…

The article discusses critical vulnerabilities in the MariaDB server, highlighting three major flaws (CVE-2026-48163, CVE-2026-48165, CVE-2026-49261) with the highest severity rating of 10.0 (CVSSv3). These vulnerabilities allow attackers to execute…

Mitel disclosed 12 critical vulnerabilities in MiCollab and MiVoice Business Solution Virtual Instance (MiVB SVI), with six rated CVSS 10.0. These flaws allow unauthenticated attackers to execute arbitrary commands, posing significant risks to sensitive…

CERT/CC has revealed a Secure Boot bypass impacting various vendor-signed UEFI applications. Discovered by ESET researcher Martin Smolar, this vulnerability allows attackers to execute unverified code before the OS loads, undermining Secure Boot's purpose to…

HAProxy has two critical vulnerabilities defined as CVE-2026-55203 and CVE-2026-55204, with severities of 9 and 8.7 respectively. The main issues are an integer overflow in the FastCGI demux record length field, which may lead to response smuggling, and a…

The article discusses a newly identified cloud security vulnerability termed "bucket hijacking," which impacts major cloud service providers like AWS, Google Cloud, and Microsoft Azure. The threat arises from the global uniqueness of storage bucket names,…

A recent malware campaign targets WhatsApp users, hijacking accounts to distribute fake debt notices that install remote access software on victims' computers. The campaign, analyzed by Kaspersky, has affected users in various countries, primarily Malaysia.…

AMD is reinstating memory encryption for its consumer CPUs following user backlash over the silent removal of the feature, known as Transparent Secure Memory Encryption (TSME). This encryption protects against physical attacks by encrypting data stored in…

The blog post discusses the significance of AI memory, which transforms AI from a stateless tool into a learning collaborator, enhancing personalization and coherence in user interactions but increasing potential security vulnerabilities. It outlines the…

The Texas Parks and Wildlife Department (TPWD) has reported a significant data breach affecting approximately 3 million individuals due to a compromise of a third-party vendor responsible for license sales. The breach exposed sensitive personal information,…

The article details a supply chain attack involving ShapedPlugin WordPress Pro plugins, which were backdoored to exploit vulnerabilities. This incident highlights the growing risks associated with supply chain security and emphasizes the importance of…

In this article, Cloudflare's team explains how they identified and resolved a bug in the hyper HTTP library, which affected image processing requests through the Images service. The issue manifested as intermittent image data truncation during…

Researchers have identified vulnerabilities in Dify that could potentially allow unauthorized access to AI chat data across multiple tenants. This presents significant privacy risks as sensitive information shared in AI communications may be exposed. The…

The article details a significant cryptocurrency heist orchestrated by attackers utilizing an elaborate fake reputation-boosting campaign through platforms like GitHub, YouTube, and VirusTotal. Researchers from Check Point Software uncovered this advanced…

The FBI has issued a warning about cyber criminals exploiting traffic distribution systems (TDS) to redirect users to malicious websites. These attackers alter the code of legitimate sites, specifically targeting those with weak security, to deploy TDS that…

The report from Microsoft's Detection and Response Team (DART) details a complex cyberattack involving a multi-stage intrusion by two parallel threat actors. Initially, a ransomware investigation revealed that the first actor, known as Storm-2603, had…

Researchers have discovered that the AryStinger botnet has hijacked over 4,300 outdated D-Link routers and network-attached storage devices, turning them into a distributed scanning network for launching cyberattacks. The compromised devices exploit…

The GentleKiller Framework, developed by the ransomware group called The Gentlemen, is a sophisticated toolkit that disables victims' security software to facilitate ransomware attacks. Recent analysis from ESET reveals that GentleKiller targets over 400…

A 29-year-old vulnerability in the Squid proxy server, called 'Squidbleed', can leak cleartext HTTP requests, posing security risks. This vulnerability, discovered on June 22, 2026, highlights the importance of ongoing security evaluations, even for…

The article discusses the ongoing popularity of webshells, particularly a new variant called ZypeerShell. This webshell, claimed to be 'the most powerful, undetectable, and feature-rich PHP webshell' is available on GitHub. The author, Xavier Mertens, notes…

A critical BootROM vulnerability has been discovered affecting Apple A12 and A13 chips, enabling attackers with physical access to compromise the boot chain. Identified as 'usbliter8', this vulnerability stems from an exploit involving a USB controller flaw…

On June 12, 2026, the Trump administration ordered Anthropic to restrict access to its AI models, Fable 5 and Mythos 5, exclusively to U.S. citizens after Mythos allegedly breached NSA and Cyber Command systems within hours. Senate testimony revealed that…

Security researchers from Calif.io have revealed a memory leak vulnerability in Squid Proxy, dubbed 'Squidbleed,' which has been present since 1997. The vulnerability, tracked as CVE-2026-47729, allows an FTP parser in Squid to read beyond memory boundaries,…

The article discusses the emergence of the OXLOADER loader, which utilizes malicious Google Ads to deliver the CastleStealer malware. It highlights the increasing trend of malvertising in cybersecurity threats, particularly focusing on endpoints. The content…

This article discusses document delivery scams, where scammers impersonate a legitimate delivery service to collect personal information and money from victims. Key points include: 1. **Nature of the Scam:** Scammers create an official-sounding voicemail…