Cyber Security News

FortiBleed credential-harvesting campaign, which has compromised more than 430,000 FortiGate firewalls worldwide, is directly feeding two active ransomware-as-a-service operations, INC Ransom and Lynx. SOCRadar’s Threat Research Unit identified an operator with access to FortiBleed infrastructure actively logged into negotiation panels for both ransomware brands, marking the first confirmed connection between mass FortiGate credential theft and […]

The post FortiBleed Password Stealing Attack Linked to INC and Lynx Ransomware Operations appeared first on Cyber Security News.

A dual U.S.-Estonian citizen accused of belonging to the notorious Scattered Spider hacking collective has been extradited from Finland to face federal charges in the Northern District of Illinois, the Department of Justice announced Tuesday. Peter Stokes, 19, was arrested by Finnish authorities in April under an Interpol Red Notice and extradited to the United […]

The post Alleged Scattered Spider Member Extradited to the US for His Role in Hacking 100+ Networks appeared first on Cyber Security News.

WhatsApp has begun allowing users to reserve usernames ahead of a broader feature launch planned for later this year, prompting a wave of questions about security, impersonation risk, and account linkage that security researchers should be tracking closely. According to WhatsApp, usernames are optional, not mandatory, meaning existing phone-number-based identification remains the default authentication and […]

The post WhatsApp Username Reservations Go Live – What Are the Security Concerns for 2 Billion Users appeared first on Cyber Security News.

CISA has issued a warning about a critical authentication bypass vulnerability in SimpleHelp that is actively being exploited in the wild, raising concerns among organizations relying on the remote support software. The vulnerability, tracked as CVE-2026-48558, affects SimpleHelp deployments configured with OpenID Connect (OIDC) authentication. According to the advisory, the flaw stems from improper validation […]

The post CISA Warns of SimpleHelp Authentication Bypass Vulnerability Exploited in Attacks appeared first on Cyber Security News.

The Indian government has issued a formal notice to WhatsApp LLC (Meta), directing the platform to justify why regulatory action should not be taken against its newly announced “usernames” feature and instructing the company not to roll it out in India until consultations are satisfactorily concluded. The letter, addressed to WhatsApp’s Chief Compliance Officer for […]

The post Indian Govt Halts Meta’s WhatsApp Usernames Rollout Over Fraud Concerns appeared first on Cyber Security News.

Two critical remote code execution (RCE) vulnerabilities in Cursor IDE, the AI-powered development environment used by more than half of Fortune 500 companies. Cato AI Labs has disclosed two flaws, dubbed ” DuneSlide, ” both of which carry a 9.8 CVSS severity score and were assigned CVE-2026-50548 and CVE-2026-50549, allowing attackers to break out of […]

The post Critical Cursor IDE RCE Vulnerabilities Enable Prompt Injection in Zero-Click appeared first on Cyber Security News.

Torrance, California, USA, July 1st, 2026, CyberNewswire Cyber threat intelligence becomes more valuable when indicators are enriched with context that supports investigation, correlation, and decision-making. Through the Criminal IP integration with OpenCTI, security teams can transform IP addresses, domains, and URLs from isolated indicators into structured intelligence within the OpenCTI knowledge graph. The integration automatically […]

The post Turning Indicators into Intelligence in OpenCTI with Criminal IP appeared first on Cyber Security News.

A large-scale automated password spray campaign is actively abusing Microsoft’s Azure Command-Line Interface (CLI) and legacy OAuth flows to compromise Entra ID accounts, despite organizations having multi-factor authentication (MFA) in place. Huntress is tracking a sustained password-and-token spray campaign targeting Microsoft 365 and Azure CLI logins, with activity spiking between June 12 and June 26, […]

The post Massive Password Stealing Attack Targeting Microsoft 365 Users With 81 Million Login Attempts appeared first on Cyber Security News.

Alert fatigue is no longer just an analyst problem. It has become a business problem.  Every unnecessary investigation, delayed escalation, or manual validation consumes valuable SOC resources and extends the time real threats remain active. As organizations face growing alert volumes without proportional team growth, reducing investigation time has become just as important as improving detection.  Let’s find […]

The post The Business Cost of Alert Fatigue: How to Reduce Delays, Escalations for Your SOC as 70% Alerts are Uninvestigated appeared first on Cyber Security News.

Apple’s “Hide My Email” feature is currently affected by an unpatched vulnerability that allows attackers to discover the real email address behind an anonymized alias, according to researcher Tyler Murphy and independent tests by 404 Media. Apple’s Hide My Email, part of iCloud+, generates unique relay addresses intended to keep a user’s primary inbox private […]

The post Apple ‘Hide My Email’ Vulnerability Exposes Users’ Real Email Addresses appeared first on Cyber Security News.

Frankfurt am Main, Deutschland, July 1st, 2026, CyberNewswire Link11, a leading European provider of cloud-based cybersecurity solutions, today announced the launch of its completely rebuilt Layer 3/4 DDoS mitigation solution, designed to address the growing complexity of modern network attacks. Today’s DDoS attacks are not just simple volume or protocol attacks anymore. They can originate […]

The post Mitigating Attacks Before They Impact Infrastructure: Link11 provides next generation network DDoS protection appeared first on Cyber Security News.

Several high-severity flaws in the widely used Fluentd log collector could lead to remote code execution (RCE), data leaks, and denial-of-service attacks across multiple components. The most critical issue, tracked as GHSA-44hj-4m45-frj3, has now been assigned CVE-2026-44024 and allows remote code execution through improper handling of the ${tag} placeholder. This vulnerability enables attackers to perform […]

The post Multiple Fluentd Vulnerabilities Let Attackers Execution Arbitrary Code Remotely appeared first on Cyber Security News.

A sponsored Google ad impersonating Anthropic’s Claude Code CLI has been caught delivering “MacSync Stealer,” a macOS credential harvester that also silently trojans Ledger Live and Ledger Wallet apps to steal crypto seed phrases. The campaign was discovered and fully reverse-engineered by researchers at Beelzebub Labs, using their agentic threat-intel platform Caronte, after a suspicious […]

The post A Weaponized Google Ad Install Malicious Claude Code to Hijack Entire macOS appeared first on Cyber Security News.

A Reddit disclosure has ignited a serious debate about developer trust and covert surveillance, alleging that Anthropic embedded undisclosed detection logic inside its Claude Code CLI tool, specifically targeting users in China or those routing traffic through Chinese AI lab proxies. A Reddit user identified as LegitMichel777 on the r/ClaudeAI subreddit posted detailed findings on […]

The post Anthropic’s Claude Code Reportedly Uses Hidden Code to Detect Chinese Users appeared first on Cyber Security News.

Microsoft has rolled out a new bot protection capability in Microsoft Teams that gives IT administrators and meeting organizers greater control over external bots attempting to join meetings, a move designed to address growing privacy and security concerns around AI-powered meeting tools. As AI note-taking bots have become increasingly embedded in the workplace, a parallel […]

The post Microsoft Teams’ New Feature Blocks Bots from Joining Meetings appeared first on Cyber Security News.

DC, United States, June 30th, 2026, CyberNewswire The Internet Society today announced that 2027 Network and Distributed System Security (NDSS) Symposium will take place in Seoul, Republic of Korea, from 22–26 March 2027. Recognized as one of the world’s top four cybersecurity research conferences, the NDSS Symposium brings together hundreds of top scholars, academics, and […]

The post NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration appeared first on Cyber Security News.

Boston, Massachusetts, June 30th, 2026, CyberNewswire Reflectiz, the web exposure management platform, today announced a live webinar with Taboola, “Securing Third-Party Marketing in the AI Era,” taking place July 8 at 9 AM EDT / 3 PM CEST. Every marketing vendor a company approves can silently introduce third and fourth-party scripts that no security team […]

The post Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era appeared first on Cyber Security News.

Imagine a Tier 1 analyst receiving an alert: an employee’s laptop has connected to an unfamiliar domain.  The detection is not dramatic. No ransomware note. No obvious malware verdict. No endpoint isolation. Just a domain, an IP address, a timestamp, and a medium-severity alert.  The analyst opens a reputation service in one tab. The result is inconclusive. A […]

The post False Positive or First Sign of a Breach? How Tier 1 SOC Analysts Can Tell the Difference Faster  appeared first on Cyber Security News.

A newly disclosed attack technique dubbed “BioShocking” is raising concerns across the cybersecurity community after researchers demonstrated that AI-powered browsers can be manipulated to leak sensitive data and bypass built-in safety controls. Security researchers at LayerX revealed that attackers can “game” AI-driven browsers into executing malicious actions by altering their perception of reality. The attack […]

The post New BioShocking Attack Allows Attackers to Trick AI Browser and Leak Credentials appeared first on Cyber Security News.

Multiple newly disclosed vulnerabilities in Apple’s AirDrop and Google/Samsung Quick Share proximity-sharing protocols allow attackers within wireless range to crash or disrupt nearby devices without user interaction repeatedly. Security researchers from CISPA Helmholtz Center for Information Security conducted a systematic reverse-engineering and protocol-aware fuzzing study of AirDrop and Quick Share across macOS, iOS, Android, and […]

The post Multiple AirDrop and Quick Share Vulnerabilities Allow Attackers to Crash Devices appeared first on Cyber Security News.