Cyber Security News

Anthropic’s latest frontier AI model, Claude Mythos Preview, has identified a staggering 271 zero-day vulnerabilities in Mozilla Firefox marking a seismic shift in AI-powered cybersecurity defense. The findings, addressed in Firefox 150, represent the most significant single batch of security fixes in the browser’s history. The discovery didn’t happen in isolation. Since February 2026, Mozilla’s […]

The post Claude Mythos AI Model Uncovers 271 Zero-Day Vulnerabilities in Firefox appeared first on Cyber Security News.

A previously undocumented remote access trojan (RAT) framework called Auraboros C2 has surfaced, exposing an alarming level of open access to victim data, live surveillance capabilities, and browser credential theft. The entire command-and-control (C2) dashboard operates over plain HTTP with no login, no token, and no authentication of any kind, making victim data accessible to […]

The post New Auraboros RAT Exposes Live Audio Streaming, Keylogging, and Cookie Hijacking in Open C2 Panel appeared first on Cyber Security News.

Nine out of ten cyber attacks start with phishing. When an incident occurs, it’s often a person who’s held accountable: a compromised employee or a SOC analyst who missed a signal.  But in a corporate environment, this framing doesn’t always apply. If a single human mistake puts the entire company at stake, the real issue might be the lack of a specific phishing defense layer.  Its presence significantly lowers the odds of […]

The post The Phishing Defense Layer Top CISOs Never Miss  appeared first on Cyber Security News.

A newly identified backdoor called DinDoor is using the legitimate Deno JavaScript runtime and MSI installer files to quietly slip past security defenses and compromise targeted systems. The malware, tracked as a variant of the Tsundere Botnet, relies on trusted, signed runtime environments instead of deploying standard compiled implants. This makes detection far more difficult […]

The post New DinDoor Backdoor Abuses Deno Runtime and MSI Installers to Evade Detection appeared first on Cyber Security News.

A serious supply chain threat has surfaced in the npm ecosystem. Malicious versions of packages belonging to Namastex.ai have been found carrying CanisterWorm malware, a self-propagating backdoor that mirrors the attack style of the threat actor known as TeamPCP. The attack silently replaces legitimate package contents with infected code and continues spreading across every namespace […]

The post Compromised Namastex npm Packages Deliver TeamPCP-Style CanisterWorm Malware appeared first on Cyber Security News.

Microsoft has issued an emergency out-of-band (OOB) security update for .NET 10, releasing version 10.0.7 on April 21, 2026, to address a critical elevation of privilege vulnerability discovered in the Microsoft.AspNetCore.DataProtection NuGet package. The out-of-band release was prompted after customers began reporting decryption failures in their ASP.NET Core applications following the standard Patch Tuesday .NET […]

The post Microsoft Emergency .NET 10.0.7 Update to Patch Elevation of Privilege Vulnerability appeared first on Cyber Security News.

A group of unauthorized users has reportedly breached access controls surrounding Claude Mythos Preview, Anthropic’s powerful and closely guarded AI-driven cybersecurity tool, raising serious concerns about third-party vendor security and the risks of placing advanced offensive AI capabilities in the wrong hands. Announced on April 7, 2026, Claude Mythos Preview is an AI model that […]

The post Unauthorized Group Gains Access to Anthropic’s Exclusive Cyber Tool Mythos appeared first on Cyber Security News.

New York, United States, April 21st, 2026, CyberNewswire BreachLock, a global leader in offensive security, today announced it has been named a representative vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation.   This recognition marks the first time BreachLock has been identified in the Adversarial Exposure Validation (AEV) category since launching its agentic AI-powered Adversarial […]

The post BreachLock Named Representative Vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation appeared first on Cyber Security News.

Washington D.C., USA, April 21st, 2026, CyberNewswire Cybersecurity Insiders, in collaboration with Saviynt, has released new research indicating that AI identities are increasingly operating within core enterprise systems, often without established governance or visibility. The study finds that while 71% of CISOs and senior security leaders confirm AI tools have access to core systems such […]

The post The Ungoverned Workforce: Cybersecurity Insiders Finds 92% Lack Visibility Into AI Identities appeared first on Cyber Security News.

SOC maturity comes down to the quality of decisions. Yet in many teams, those decisions are still made based on fragmented intelligence and outdated indicators. This is where progress stalls: threat data remains external to the workflow.  Mature SOCs take a different approach by embedding threat intelligence directly into their operations. That’s how it becomes more than a reference […]

The post Where Most SOCs Stall: Building SOC Maturity with Threat Intelligence Feeds  appeared first on Cyber Security News.

A new and more dangerous version of the NGate malware has been found hiding inside a trojanized NFC payment application. This time, threat actors appear to have used artificial intelligence to help write the malicious code, which marks a significant shift in how cybercriminals are building attack tools today. The malware targets Android users by […]

The post New NGate Malware Developed Using AI Hides in NFC Payment Apps appeared first on Cyber Security News.

A new and sophisticated malware campaign has been discovered, using a remote access trojan (RAT) called PureRAT to silently compromise Windows systems. What makes this campaign stand out is how cleverly it hides malicious code inside ordinary-looking PNG image files. Once the infection takes hold, the malware runs entirely in memory, leaving almost no traces […]

The post New PureRAT Campaign Hides PE Payloads in PNG Files and Executes Them Filelessly appeared first on Cyber Security News.

Cybersecurity researchers have uncovered a sophisticated phishing technique that targets software developers by abusing GitHub’s own notification system to deliver malicious OAuth app authorization requests. This attack is particularly dangerous because it uses GitHub’s trusted infrastructure, making it extremely hard for victims to distinguish it from a legitimate security alert. Developers are among the most […]

The post Hackers Abuse GitHub Issue Notifications to Phish Developers Through Malicious OAuth Apps appeared first on Cyber Security News.

CISA has added three critical Cisco Catalyst SD-WAN Manager vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies and organizations to act immediately. All three flaws were added on April 20, 2026, with a tight remediation deadline of April 23, 2026. The three vulnerabilities affect Cisco Catalyst SD-WAN Manager, a widely used platform […]

The post CISA Warns of Cisco Catalyst SD-WAN Manager Vulnerabilities Exploited in Attacks appeared first on Cyber Security News.

More than 6,000 internet-exposed Apache ActiveMQ instances are still vulnerable to CVE-2026-34197. This newly tracked security flaw has now been added to the U.S. Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities (KEV) catalog. The exposure data comes from The Shadowserver Foundation, which said it has started daily internet scans for the flaw. In an update published on April 20, […]

The post 6000+ Apache ActiveMQ Instances Vulnerable to CVE-2026-34197 Exposed Online appeared first on Cyber Security News.

A real-world intrusion campaign leveraging publicly available Nightmare-Eclipse privilege escalation tooling, BlueHammer, RedSun, and UnDefend, following what appears to be unauthorized access through a compromised FortiGate SSL VPN. The incident marks the first confirmed in-the-wild deployment of these tools against a live enterprise environment, raising urgent alarms for security teams globally. The tools at the […]

The post Hackers Use Nightmare-Eclipse Tools After Compromising FortiGate SSL VPN Access appeared first on Cyber Security News.

A new ransomware-as-a-service (RaaS) operation known as “The Gentlemen” has emerged as a serious threat to corporate networks worldwide. Since appearing around mid-2025, this group has rapidly grown into a well-organized criminal platform, publicly claiming over 320 victims, with most attacks — more than 240 — recorded in the opening months of 2026. The speed […]

The post Gentlemen RaaS Attacking Windows, Linux With additional locker written in C for ESXi appeared first on Cyber Security News.

Artificial intelligence is reshaping cybercrime in ways that defenders can no longer treat as distant or theoretical. New frontier AI models are showing a growing ability to find software flaws, understand attack paths, and help move an intrusion from one stage to the next with far less human effort than before. This change matters because […]

The post AI-Powered Exploitation May Collapse the Patch Window for Defenders appeared first on Cyber Security News.

A massive malware campaign known as “StealTok” involves at least 12 interrelated browser extensions. These extensions masquerade as TikTok video downloaders but secretly track user activity and harvest sensitive data. The campaign uncovered by LayerX security has affected over 130,000 users worldwide, with approximately 12,500 installations still active across the Google Chrome and Microsoft Edge […]

The post 12 Browser Extensions Mimic as TikTok Video Downloaders Compromised 130k Users appeared first on Cyber Security News.

A critical vulnerability in the SGLang inference server that allows threat actors to execute arbitrary code. Tracked as CVE-2026-5760, this flaw allows hackers to weaponize standard GGUF machine learning models to compromise the underlying servers that host them. As enterprise artificial intelligence deployments grow, this discovery highlights the severe infrastructure risks posed by loading untrusted […]

The post Hackers Could Weaponize GGUF Models to Achieve RCE on SGLang Inference Servers appeared first on Cyber Security News.