Cyber Security News

Google has officially released Gemini 3.5 Flash with native “computer use” capabilities, marking a significant shift toward autonomous AI agents that can interact directly with digital environments. Announced on June 24, 2026, the update enables developers to build intelligent agents capable of performing actions across browsers, mobile devices, and desktop systems. The newly integrated feature […]

The post Gemini 3.5 Flash Released With Computer Use Capabilities that Build Agents appeared first on Cyber Security News.

WhatsApp is rolling out a new security warning on both Android and iOS that appears before users even open a conversation with an unknown phone number. WABetaInfo noted that the feature displays the country where the number is registered, whether it’s saved as a contact, and whether any groups are shared, prompting users to pause […]

The post WhatsApp to Warn Users Before Starting Chats With New Phone Numbers appeared first on Cyber Security News.

A newly discovered malware campaign has turned Google Chrome into a remote backdoor without breaking any of the browser’s built-in rules. Spotted in June 2026, the attack arrived in Italian-language phishing emails that looked like standard business invoices. The email claimed a requested invoice was ready, signed off by an accounting office, and showed what […]

The post Malicious Chrome Extension Uses Native Messaging Host to Execute PowerShell Commands appeared first on Cyber Security News.

A wave of malicious skills targeting the OpenClaw AI agent marketplace has exposed a dangerous new frontier in software supply chain security. Attackers are using the ClawHub skill marketplace to push harmful code into AI agent environments, stealing data and running financial fraud schemes that traditional security tools failed to catch. OpenClaw is an AI […]

The post OpenClaw Skill Marketplace Exposes AI Agents to Supply Chain Malware and Financial Fraud appeared first on Cyber Security News.

A newly discovered malware family is making its way onto systems worldwide by hiding inside fake software installers that look completely legitimate. Researchers have identified a campaign where attackers disguise their malicious tools as trusted programs like Cisco AnyConnect and Google Update, tricking users into running them without suspicion. Once the file is executed, a […]

The post Hackers Use Cisco AnyConnect and Google Update Lures to Drop SharkLoader Malware appeared first on Cyber Security News.

Google has released a critical security update for its Chrome browser, pushing the Stable channel to version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux. The update addresses 18 security vulnerabilities, including four rated Critical and fourteen rated High severity, several of which could allow attackers to execute arbitrary code on affected systems. The […]

The post Chrome 149 Security Update — Patch for Critical Flaws that Enable Code Execution Attacks appeared first on Cyber Security News.

Anthropic has formally accused Chinese tech and e-commerce giant Alibaba of orchestrating a massive, unauthorized extraction campaign targeting its Claude AI model, marking what the company describes as the largest known distillation attack in its history. In a letter dated June 10, 2026, and addressed to U.S. Senate Banking Committee Chair Tim Scott and Ranking […]

The post Anthropic Accuses Alibaba of ‘Illicitly’ Accessing Its Claude AI Models in Largest Known Distillation Attack appeared first on Cyber Security News.

A new and stealthy backdoor named Mistic has been quietly targeting corporate networks since April 2026, disguising itself using the names and appearance of legitimate Microsoft endpoint security components. This clever camouflage helps it avoid detection, allowing attackers to maintain a persistent, low-profile foothold inside compromised environments. Security teams across multiple industries are now on […]

The post Mistic Backdoor Blends With Microsoft Endpoint Security Tooling to Evade Detection appeared first on Cyber Security News.

Threat actors are once again exploiting the trust people place in everyday workplace tools. A newly discovered phishing campaign is using fake Microsoft Teams notifications to trick employees into downloading a remote access tool that gives attackers full control over their systems. The operation is carefully designed to look legitimate at every step, making it […]

The post Microsoft Teams Impersonation Campaign Enables Unauthorized Access Through RMM Abuse appeared first on Cyber Security News.

A dangerous Android banking trojan is once again spreading through the Google Play Store, hiding inside what appears to be a simple document reader app. The app has already been downloaded more than 100,000 times, putting a large number of Android users at serious risk of financial theft and personal data loss. The malware in […]

The post Fake Document Reader in The Google Play Store with 100K Downloads Deliver Android Malware appeared first on Cyber Security News.

The White House has issued a major executive order directing U.S. federal civilian agencies to migrate high‑value systems to post‑quantum cryptography (PQC), with firm deadlines of 2030 for key establishment and 2031 for digital signatures. The order, titled “Securing the Nation Against Advanced Cryptographic Attacks,” warns that large‑scale quantum computers could eventually break today’s widely […]

The post White House Orders Federal Agencies to Migrate Systems to Post-Quantum Cryptography appeared first on Cyber Security News.

A public proof-of-concept (PoC) exploit for the critical libssh2 remote code execution vulnerability tracked as CVE-2026-55200 is now available, significantly increasing the risk of real‑world attacks against unpatched systems. The flaw affects libssh2 versions up to and including 1.11.1 and resides in the ssh2_transport_read() function, which parses incoming SSH packets on the client side. The […]

The post PoC Exploit Released for libssh2 Remote Code Execution Vulnerability appeared first on Cyber Security News.

A newly identified attack campaign is using a sophisticated Browser-in-the-Browser (BitB) kit to trick users into downloading malware disguised as legitimate software installers. The technique combines convincing fake browser pop-ups with fabricated error messages to manipulate victims into taking actions they believe are routine and safe. The campaign marks a notable evolution in how phishing […]

The post Browser-in-the-Browser Kit Uses Fake Software Errors to Deliver Malware Installers appeared first on Cyber Security News.

A newly identified malware cluster known as GhostShell has been found actively targeting Ukraine’s drone operations and its broader defense supply chain. The campaign uses a sophisticated combination of techniques, including a mutual TLS implant and a Telegram-based dead-drop resolver, to quietly establish persistence inside targeted networks. The threat actor behind this operation has been […]

The post GhostShell Malware Uses mTLS Implant and Telegram Dead-Drop to Target Ukrainian Drone Operations appeared first on Cyber Security News.

A first-of-its-kind security analysis of 12 widely deployed agentic offensive-security tools reveals critical architectural flaws that allow adversaries to steal LLM API keys, establish persistent footholds, and achieve full host compromise even inside sandboxed containers. Security researchers from Cracken have published the first in-depth security analysis of agentic red-team systems, AI-powered tools designed to autonomously […]

The post Red-Team AI Tool Vulnerabilities Let Attackers Exfiltrate API Keys and Compromise Operators’ Systems appeared first on Cyber Security News.

Unpatched on-premises SharePoint servers have become a prime target for sophisticated threat actors using known security flaws to break in, plant ransomware, and leave behind hidden backdoors. These are not opportunistic smash-and-grab operations. They are calculated, multi-stage campaigns designed to stay inside a network for as long as possible, often without raising any alarms. The […]

The post Hackers Exploit Unpatched SharePoint Servers to Deploy Ransomware and Custom Backdoors appeared first on Cyber Security News.

A malicious AI “skill” created as part of a controlled security experiment has exposed critical weaknesses in modern AI agent ecosystems, successfully bypassing security scanners and compromising more than 26,000 agents across individual and enterprise environments. According to researcher Niv Hoffman, the attack began with the creation of a seemingly legitimate AI skill named “brand-landingpage,” […]

The post Malicious AI Agent Skill Bypasses Security Scans and Seizes Full Control of Over 26,000 Agents appeared first on Cyber Security News.

Anthropic’s Claude Fable 5 generated a complete, bootable NT-compatible Windows kernel written in Rust called ntoskrnl-rs from an empty directory in just 38 minutes of active model work, raising profound questions about AI-authored trust and the future of critical infrastructure security. Documented by security researcher Matt Suiche and Tolmo’s threat research on June 22, 2026, […]

The post Claude Fable 5 Wrote Windows Kernel Code in Rust in 38 Minutes appeared first on Cyber Security News.

A fresh wave of scam websites is targeting gamers worldwide, using the massive hype around Grand Theft Auto VI to trick people into handing over their money. These fake pages promise something millions of players desperately want: early access to GTA 6 before its official release. The offers sound tempting, but every single one is […]

The post GTA 6 Scam Websites Use AI-Generated Images and Fake Download Buttons to Lure Gamers appeared first on Cyber Security News.

A large-scale, ongoing credential-harvesting campaign dubbed “FortiBleed” has silently compromised more than 430,000 FortiGate firewalls globally, siphoning over 110 million credentials directly from live network traffic since at least February 2026. The campaign came to light after security researcher Volodymyr “Bob” Diachenko discovered an exposed directory on 85.11.187[.]8:9999. FortiBleed is not a single intrusion; it […]

The post FortiBleed Attack Hit 430,000+ FortiGate Firewalls, Stealing 110M+ Credentials appeared first on Cyber Security News.