Cyber Security News

A recent Microsoft Defender for Endpoint update briefly disabled antivirus protection on Linux servers following an upgrade and reboot, exposing affected machines to threats before Microsoft rolled out a fix. The issue struck Linux platform builds 101.26042.0000 through 101.26042.0009, where the Defender service could become disabled on devices that were upgraded and then rebooted, effectively […]

The post Microsoft Defender for Endpoint Update Leaves Few Linux Servers Unprotected After Reboot appeared first on Cyber Security News.

vBulletin has patched CVE-2026-61511, a critical remote code execution flaw that could let unauthenticated attackers execute arbitrary PHP code and compromise vulnerable forum servers. This issue affects vBulletin versions 6.2.1 and earlier as well as versions 6.1.6 and earlier. The flaw exists in the file /includes/vb5/template/runtime.php, specifically within the vB5_Template_Runtime::runMaths() method. This function processes values […]

The post Critical vBulletin Flaw Lets Unauthenticated Attackers Execute PHP Code Remotely appeared first on Cyber Security News.

The notorious ShinyHunters extortion gang has publicly claimed responsibility for the Ernst & Young (EY) data breach, alleging it stole employee credentials and sensitive files through a supply-chain compromise of a third-party IT support platform. The claim, posted on the group’s dark web leak site with a “final warning” deadline of July 31, 2026, threatens […]

The post EY Data Breach Claimed by ShinyHunters Hacker Group appeared first on Cyber Security News.

GitHub has introduced a default three-day cooldown period for Dependabot version updates to reduce the risk of projects automatically adopting new malicious packages. This change targets a prevalent pattern in software supply chain attacks where attackers compromise a trusted package maintainer’s account, publish a malicious update, and rely on automated dependency tools to distribute it […]

The post GitHub Adds 3-Day Dependabot Cooldown to Block Malicious Package Updates appeared first on Cyber Security News.

A new phishing operation, tracked as Operation BlueDash, is tricking users into installing a fake Microsoft Teams update that silently hands attackers not one but two independent ways to remotely control infected computers. The infection starts with an email claiming a document was “too large” to send directly and was instead shared securely through Microsoft […]

The post A Fake Teams Update Can Give Hackers Two Separate Ways to Control Your PC appeared first on Cyber Security News.

Philadelphia, Pennsylvania, July 27th, 2026, CyberNewswire Security Risk Advisors is proud to share that CRN, a brand of The Channel Company, has recognized Joe Cicero as a finalist in the second annual CRN Best of the Channel Awards in the Best Channel Visionary of the Year category. As a finalist, Joe is being spotlighted for […]

The post Security Risk Advisors Named a Finalist in CRN’s 2026 Best of the Channel Awards appeared first on Cyber Security News.

A coalition of over 30 technology industry leaders, including NVIDIA, Microsoft, CrowdStrike, Cisco, IBM, Palo Alto Networks, and Red Hat, has launched the Open Secure AI Alliance. The initiative aims to equip cyber defenders with transparent, community-driven AI security tools to counter increasingly sophisticated digital threats. Building on the Linux Foundation’s Akrites project and the […]

The post NVIDIA Launches Open Secure AI Alliance to Build Open-Source Defenses for AI Agents appeared first on Cyber Security News.

A newly discovered remote access Trojan called MedusaHVNC lets attackers open a hidden virtual desktop on a victim’s own computer, quietly loading their real browser profile, cookies, and logged-in sessions without any visible sign of intrusion. Sold as malware-as-a-service through a dedicated website and Telegram channel, MedusaHVNC represents an evolution of hidden VNC (HVNC) techniques […]

The post Hackers Can Use MedusaHVNC to Control Your PC on a Desktop You Cannot See appeared first on Cyber Security News.

The Vatican’s official Click to Pray app has exposed the personal information of more than 700,000 users through an unauthenticated API flaw. The issue allowed anyone with a web browser to retrieve account data without needing to sign in. Click to Pray offers daily prayers and papal content through its website and mobile applications. Users […]

The post Vatican’s Click to Pray App Exposes 700,000 Users Through Unauthenticated API Flaw appeared first on Cyber Security News.

Cryptocurrency theft is increasingly moving beyond the screen. Criminals are using violence, threats, home invasions, and kidnapping attempts to force victims to unlock wallets or approve transfers while under pressure. These incidents are known as wrench attacks, a term that describes bypassing strong encryption by targeting the person who controls the keys. Instead of defeating […]

The post Wrench Attacks Bypass Encryption by Forcing Victims to Unlock Crypto Wallets appeared first on Cyber Security News.

Anthropic’s Claude share links appeared in public search results, raising fresh privacy concerns for users who shared sensitive conversations. A Reddit post this weekend revealed that hundreds of Claude AI shared chats were publicly discoverable through Google. Users searching queries such as site:claude.ai/share could access conversations containing legal advice, engineering work, and personal discussions without […]

The post Claude AI Shared Chats Reportedly Exposed in Google Search Results appeared first on Cyber Security News.

Threat actors continued to combine classic exploitation techniques with AI-accelerated tooling this week, from a 15-year-old NGINX bug and an actively exploited Check Point authentication flaw to autonomous AI agents chaining zero-days against Hugging Face. Below is a roundup of 18 major stories covering ransomware, AI security, kernel vulnerabilities, cloud/SaaS abuse, and critical infrastructure flaws. […]

The post Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories appeared first on Cyber Security News.

The current conflict between the United States and Iran has become a case study in how asymmetric warfare and coalition building are reshaping the cyber and geopolitical dimensions of modern conflict. Following the United States and Israel’s joint military strikes on Iran in February 2026, Iranian state and state-aligned actors rapidly increased cyber attacks against […]

The post How Pro-Iran Hacktivist Networks Mobilize During Kinetic Conflict appeared first on Cyber Security News.

Managing Active Directory with native tools alone can become time-consuming as an organization grows. Routine tasks such as provisioning users, resetting passwords, managing group memberships, auditing permissions, and maintaining compliance can place a heavy burden on IT teams. Manual processes also increase the risk of configuration errors, excessive privileges, security gaps, and inactive accounts going […]

The post Top 10 Best Active Directory Management Tools 2026 appeared first on Cyber Security News.

PentesterFlow is a new open-source, human-in-the-loop agentic AI command-line tool built specifically for penetration testers and bug bounty hunters, designed to automate recon-to-reporting workflows without sacrificing analyst oversight. Most agentic AI security tools suffer from hallucinated findings, weak context retention, and poor tool integration, but PentesterFlow tackles these problems head-on with built-in pentest skills, evidence-based […]

The post PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows appeared first on Cyber Security News.

A newly disclosed exploit chain in GitLab shows how two long-buried memory-safety flaws in a Ruby JSON parsing library, Oj, could be combined to achieve remote code execution on default GitLab installations, exposing source code, Rails secrets, and internal services. As part of the Open Defense Initiative, Depthfirst researcher Yuhang Wu used the automated analysis […]

The post GitLab Vulnerabilities Allow Attackers to Execute Remote Code on Default GitLab Installations appeared first on Cyber Security News.

A well-known AI red teamer claims to have developed a universal jailbreak that works against leading large language models, including heavily guarded flagships such as GPT-5.6 Sol, Claude Opus 5, and Fable. In a public post on X, Pliny the Liberator described the technique as effective “on ALL models” and across every category he tested. […]

The post Researcher Claims Working Jailbreak on Top AI Models Including GPT-5.6, Claude Opus 5, and Fable appeared first on Cyber Security News.

Zero Trust Network Access (ZTNA) anchors 2026 cybersecurity amid remote, cloud, and hybrid booms. ZTNA solutions aren’t hype—they’re vital for data locks, compliance wins, and borderless teams. “Never trust, always verify”: ZTNA okays only vetted users/devices, location-blind. Shrink attack planes, block lateral creeps, master app gates. Market clutter and threat flux complicate picks. We rank […]

The post 10 Best ZTNA Solutions (Zero Trust Network Access) In 2026 appeared first on Cyber Security News.

Foxit PDF Reader has been found vulnerable to a local privilege escalation flaw that allows standard Windows users to gain full SYSTEM-level control under specific conditions. The issue, tracked as CVE-2026-57239, was disclosed following research into Foxit’s updater and service architecture and represents a high-impact post-exploitation pathway, although it requires prior code execution on the […]

The post Foxit Updater Vulnerability Gives Standard Users SYSTEM-Level Control of Windows Devices appeared first on Cyber Security News.

Tel Aviv, Israel, July 24th, 2026, CyberNewswire One week after disclosing that Anthropic’s Claude Tag Slack integration could be driven by plain “@Claude” text, Tego AI today published a second piece of research on the Claude ecosystem. This one focuses on Claude Code, Anthropic’s agentic command-line coding tool. Cloning an ordinary repository and starting Claude […]

The post Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers appeared first on Cyber Security News.