Aggregator

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.

The post How software development’s speed obsession enabled TeamPCP’s chaos crusade appeared first on CyberScoop.

Mozilla has released Firefox 152 to address multiple high-severity vulnerabilities that could allow remote code execution (RCE) and sandbox escape attacks. The security advisory, published on June 16, 2026, highlights a wide range of flaws affecting core browser components and emphasizes the urgency for users to update immediately. Several of the patched vulnerabilities are classified […]

The post Multiple Vulnerabilities in Firefox 152 Enables Remote Code Execution Attacks appeared first on Cyber Security News.

You must login to view this content

You must login to view this content

You must login to view this content

The consulting giant’s majority stake in Dragos, along with the purchase runZero and NetRise, marks its first major push into operational technology software as AI-driven threats to critical infrastructure intensify.

The post Accenture shells out $4.18B on three companies in big industrial cybersecurity push appeared first on CyberScoop.

Hackers are increasingly finding new ways to abuse legitimate enterprise features, and Microsoft SQL Server 2025’s newly introduced AI capabilities are now raising serious security concerns. SpecterOps researchers have demonstrated that these built-in features can be leveraged for stealthy data exfiltration and even command-and-control (C2) communication, all from within the database engine itself. Microsoft introduced […]

The post Hackers Can Leverage SQL Server 2025 AI Features to Exfiltrate Sensitive Data appeared first on Cyber Security News.

A newly uncovered attack campaign has brought a rarely scrutinized Windows executable into the spotlight. Threat actors are actively abusing Fondue.exe, a legitimate Microsoft utility built into the Windows operating system, to side-load a malicious control panel file named APPWIZ.cpl and silently deploy dangerous malware on victim machines. The technique is deceptively clever because it relies entirely on […]

The post Hackers Abuse Microsoft Fondue.exe to Side-Load APPWIZ.cpl and Execute Malware appeared first on Cyber Security News.

Hackers have found a new way to get AI tools to do their dirty work without paying for it. Instead of using their own resources, attackers are hijacking exposed AI model servers and plugging them into automated hacking pipelines. The result is a self-directed attack tool that can scan targets, find weaknesses, write exploits, and […]

The post Hackers Abuse Legitimate RMM Tools to Maintain Persistent Access and Evade Detection appeared first on Cyber Security News.