Cyber Security News

A new malware campaign is tricking traders into downloading a data-stealing tool by impersonating the popular financial platform TradingView. Attackers set up a fake website promoting something called TradingClaw, which they describe as an AI-powered trading assistant. Once a visitor downloads and runs what they believe is a helpful trading tool, they unknowingly install Needle […]

The post Fake TradingView AI Agent Site is Delivering Needle Stealer Malware via Fake TradingClaw appeared first on Cyber Security News.

A nation-state-linked hacking group has found a clever way to hide its malicious activity inside Microsoft Outlook mailboxes, making its attacks much harder to detect by standard security tools. The Harvester APT group, believed to be a nation-state-backed threat actor active since at least 2021, has developed a new Linux version of its GoGra backdoor. […]

The post Hackers Use Outlook Mailboxes to Hide Linux GoGra Backdoor Communications appeared first on Cyber Security News.

Microsoft is set to introduce Efficiency Mode in Microsoft Teams, a performance-enhancing feature designed to improve app responsiveness and meeting quality on hardware-constrained devices. The rollout begins in early May 2026 and is expected to be completed by mid-May 2026, with the feature linked to Microsoft 365 Roadmap ID 560055. Efficiency Mode is a performance-optimized […]

The post Microsoft Teams Rolls Out Efficiency Mode to Optimize Performance on Low-End Devices appeared first on Cyber Security News.

Web infrastructure platform Vercel has disclosed a significant security incident involving unauthorized access to internal systems, tracing the attack chain back to a compromise of Context.ai, a third-party AI productivity tool used by one of its employees. Vercel first published its security bulletin on April 19, 2026, confirming that an attacker successfully gained a foothold […]

The post Vercel Confirms Security Breach – Set of Customer Account Compromised appeared first on Cyber Security News.

A sophisticated cyberattack campaign linked to the well-known threat group Tropic Trooper has recently surfaced, leveraging military-themed document lures to target Chinese-speaking individuals in Taiwan, along with individuals in South Korea and Japan. The campaign was discovered on March 12, 2026, when researchers came across a malicious ZIP archive that set off a multi-stage attack […]

The post New Tropic Trooper Attack Uses Custom Beacon Listener and VS Code Tunnels for Remote Access appeared first on Cyber Security News.

A high-severity privilege escalation vulnerability, dubbed Pack2TheRoot (CVE-2026-41651, CVSS 3.1: 8.8), has been publicly disclosed by Deutsche Telekom’s Red Team, affecting multiple major Linux distributions in their default installations. The flaw allows any local unprivileged user to silently install or remove system packages, ultimately achieving full root access without requiring a password. The vulnerability resides […]

The post Critical Pack2TheRoot Vulnerability Let Attackers Gain Root Access or Compromise the System appeared first on Cyber Security News.

Apple released iOS 26.4.2 and iPadOS 26.4.2 on April 22, 2026, to patch a critical notification privacy vulnerability that allowed law enforcement to extract Signal message content from iPhones — even after the app had been deleted. The flaw, tracked as CVE-2026-28950, stems from a logging issue in Apple’s notification services. Notifications marked for deletion […]

The post Apple Fixes Notification Privacy Flaw That Allowed FBI to Access Deleted Signal Messages appeared first on Cyber Security News.

A significant supply chain attack targeting the official checkmarx/kics Docker Hub repository, where threat actors pushed trojanized images capable of harvesting and exfiltrating sensitive developer credentials and infrastructure secrets. Docker’s internal monitoring flagged suspicious activity around KICS image tags on April 22, 2026, and promptly alerted Socket researchers. The investigation revealed that attackers had overwritten […]

The post Checkmarx KICS Official Docker Repo Compromised to Inject Malicious Code appeared first on Cyber Security News.

A large-scale malware distribution campaign has been uncovered involving 109 fake GitHub repositories that were used to trick users into downloading two dangerous malware tools named SmartLoader and StealC. The campaign was carefully built around cloned versions of legitimate open-source projects, making it hard for everyday users to spot the difference between what was real […]

The post 109 Fake GitHub Repositories Used to Deliver SmartLoader and StealC Malware appeared first on Cyber Security News.

Cybercriminals are now using Google’s own advertising platform to steal cryptocurrency from unsuspecting users. They place fake ads that look exactly like real links to popular crypto applications, and when users click on them, they land on websites designed to drain their wallets or trick them into giving away their secret recovery phrases. This type […]

The post Malicious Google Ads Target Crypto Users With Wallet Drainers and Seed Phrase Theft appeared first on Cyber Security News.

Organized fraud networks are now using a new method to move stolen money in France. They create fake business accounts on freelancer fintech platforms and use those accounts as mule accounts to launder funds quickly, often before anyone can trace the money. This is not a simple scam by one bad actor. It is a […]

The post Cybercriminals Exploit French Fintech Accounts to Move Stolen Money Before Detection appeared first on Cyber Security News.

A newly discovered malware called Lotus Wiper has been used in a targeted destructive attack against the energy and utilities sector in Venezuela. Unlike ransomware, this threat does not ask for money or lock files for a ransom payment. Instead, it permanently destroys data, wipes entire drives, and leaves systems in a state from which […]

The post Hackers Use Lotus Wiper to Destroy Drives and Delete Files in Energy Sector Attack appeared first on Cyber Security News.

A North Korea-linked threat group is quietly getting hired by real companies. Jasper Sleet, a threat actor tied to North Korea, has been building fake professional identities and using them to land legitimate remote IT jobs, giving them direct access to cloud environments and sensitive internal data. The shift to remote and hybrid work after […]

The post Microsoft Warns Jasper Sleet Uses Fake IT Worker Identities to Infiltrate Cloud Environments appeared first on Cyber Security News.

Anthropic’s latest frontier AI model, Claude Mythos Preview, has identified a staggering 271 zero-day vulnerabilities in Mozilla Firefox marking a seismic shift in AI-powered cybersecurity defense. The findings, addressed in Firefox 150, represent the most significant single batch of security fixes in the browser’s history. The discovery didn’t happen in isolation. Since February 2026, Mozilla’s […]

The post Claude Mythos AI Model Uncovers 271 Zero-Day Vulnerabilities in Firefox appeared first on Cyber Security News.

A previously undocumented remote access trojan (RAT) framework called Auraboros C2 has surfaced, exposing an alarming level of open access to victim data, live surveillance capabilities, and browser credential theft. The entire command-and-control (C2) dashboard operates over plain HTTP with no login, no token, and no authentication of any kind, making victim data accessible to […]

The post New Auraboros RAT Exposes Live Audio Streaming, Keylogging, and Cookie Hijacking in Open C2 Panel appeared first on Cyber Security News.

Nine out of ten cyber attacks start with phishing. When an incident occurs, it’s often a person who’s held accountable: a compromised employee or a SOC analyst who missed a signal.  But in a corporate environment, this framing doesn’t always apply. If a single human mistake puts the entire company at stake, the real issue might be the lack of a specific phishing defense layer.  Its presence significantly lowers the odds of […]

The post The Phishing Defense Layer Top CISOs Never Miss  appeared first on Cyber Security News.

A newly identified backdoor called DinDoor is using the legitimate Deno JavaScript runtime and MSI installer files to quietly slip past security defenses and compromise targeted systems. The malware, tracked as a variant of the Tsundere Botnet, relies on trusted, signed runtime environments instead of deploying standard compiled implants. This makes detection far more difficult […]

The post New DinDoor Backdoor Abuses Deno Runtime and MSI Installers to Evade Detection appeared first on Cyber Security News.

A serious supply chain threat has surfaced in the npm ecosystem. Malicious versions of packages belonging to Namastex.ai have been found carrying CanisterWorm malware, a self-propagating backdoor that mirrors the attack style of the threat actor known as TeamPCP. The attack silently replaces legitimate package contents with infected code and continues spreading across every namespace […]

The post Compromised Namastex npm Packages Deliver TeamPCP-Style CanisterWorm Malware appeared first on Cyber Security News.

Microsoft has issued an emergency out-of-band (OOB) security update for .NET 10, releasing version 10.0.7 on April 21, 2026, to address a critical elevation of privilege vulnerability discovered in the Microsoft.AspNetCore.DataProtection NuGet package. The out-of-band release was prompted after customers began reporting decryption failures in their ASP.NET Core applications following the standard Patch Tuesday .NET […]

The post Microsoft Emergency .NET 10.0.7 Update to Patch Elevation of Privilege Vulnerability appeared first on Cyber Security News.

A group of unauthorized users has reportedly breached access controls surrounding Claude Mythos Preview, Anthropic’s powerful and closely guarded AI-driven cybersecurity tool, raising serious concerns about third-party vendor security and the risks of placing advanced offensive AI capabilities in the wrong hands. Announced on April 7, 2026, Claude Mythos Preview is an AI model that […]

The post Unauthorized Group Gains Access to Anthropic’s Exclusive Cyber Tool Mythos appeared first on Cyber Security News.