Cyber Security News

A startup operating as Operation Bluebird, Inc. has launched early access to a new social media service on Twitter.now, positioning itself as a revival of the Twitter brand that Elon Musk’s X Corp. abandoned after its 2023 rebrand. The company says it is independent of X Corp. and is rebuilding the former “town square” model […]

The post New Twitter Launches as Startup Claims Elon Musk’s X Abandoned the Twitter Name appeared first on Cyber Security News.

GitLab has released security updates to fix a high-severity vulnerability in its Duo Claude AI agent that could allow authenticated developers to execute arbitrary commands within CI pipeline contexts. The flaw, tracked as CVE-2026-18252, affects GitLab Enterprise Edition installations and carries a CVSS score of 7.3. The company issued patched versions GitLab 19.3.1, 19.2.5, and […]

The post GitLab Fixes Claude AI Agent Flaw That Could Execute Arbitrary Commands in CI Pipeline appeared first on Cyber Security News.

TP-Link has disclosed a high-severity vulnerability affecting multiple Kasa smart home devices that could allow attackers on the same local network to intercept, replay, or forge device-control commands. Tracked as CVE-2026-76784, the flaw can lead to unauthorized changes to device state, disruption of normal functionality, or denial-of-service conditions. The security advisory, last updated on August […]

The post TP-Link Kasa Smart Home Devices Vulnerability Allows Attackers to Disrupt Device Functionality appeared first on Cyber Security News.

The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft SQL Server remote code execution vulnerability, tracked as CVE-2019-1068, to its Known Exploited Vulnerabilities catalog after confirming exploitation in attacks. The flaw affects Microsoft SQL Server and can allow an attacker to execute code under the permissions of the SQL Server Database Engine service […]

The post CISA Warns of Microsoft SQL Server RCE Vulnerability Exploited in Attacks appeared first on Cyber Security News.

OpenAI has removed a cluster of ChatGPT accounts linked to a covert influence operation from Russia. The accounts produced social-media posts and replies designed to steer people toward the International Burke Institute, or IBI, a purported Israeli expert community. The campaign did not depend on malicious software or an exploit. It used generative AI to […]

The post OpenAI Bans Russia-Linked ChatGPT Accounts Used in Covert Influence Campaign appeared first on Cyber Security News.

Iran-linked hackers have expanded an espionage effort with a Windows backdoor and reverse SSH tunnelling utility. The activity is tied to Tortoiseshell, also tracked as Mirage Kitten, UNC1549 and Nimbus Manticore. The campaign gives operators more ways to retain access after breaking into a network. The tunnelling tool can route traffic from an attacker-controlled server […]

The post Iran-Linked Hackers Expand Attacks With New Backdoor and Reverse SSH Tunnels appeared first on Cyber Security News.

Cybercriminals are using a counterfeit Claude desktop application to compromise Windows systems, disable key security checks, and install remote-access malware. The campaign turns a familiar AI software search into a route for credential theft and long-term access. It also shows how trusted-looking download pages can make a dangerous file appear routine. For organizations, the campaign […]

The post Hackers Use Fake Claude Desktop App to Disable Defender and Install Remote Access Malware appeared first on Cyber Security News.

Twenty-four malicious npm packages have been used to turn trusted package mirrors into staging points for ClickFix phishing pages. The campaign does not infect a developer by installing a package. Instead, it exploits the confidence users place in familiar hosting domains to make a phishing page appear safer than it is. The packages contain a […]

The post 24 Malicious npm Packages Abuse Trusted Mirrors to Host ClickFix Phishing Pages appeared first on Cyber Security News.

A phishing operation is abusing legitimate remote monitoring and management tools to give attackers direct control over victim systems. The campaign uses convincing document lures, rapidly changing hosting infrastructure, and signed software that can blend into normal IT activity. A phishing campaign is turning familiar support software into a direct route into corporate systems. Rather […]

The post Hackers Abuse Legitimate RMM Tools in 46-Country Phishing Campaign to Gain Remote Access appeared first on Cyber Security News.

SonicWall has disclosed two security vulnerabilities in its NetExtender Linux client, including a critical path traversal flaw that could allow an attacker to write arbitrary files with root privileges. The issues affect NetExtender Linux Client versions 10.3.5 and earlier; the fixed release is version 10.3.6 and later. Tracked as CVE-2026-66152, the more severe vulnerability received […]

The post SonicWall NetExtender Vulnerabilities Allow an Attacker to Write Arbitrary Files as Root appeared first on Cyber Security News.

A critical vulnerability in the TranslatePress WordPress plugin could allow unauthenticated attackers to hijack administrator accounts and fully compromise affected websites. The flaw, tracked as CVE-2026-19632, affects TranslatePress versions up to 3.3.1 and has been fixed in version 3.3.2. TranslatePress is a multilingual WordPress plugin with more than 400,000 active installations. Wordfence assigned the vulnerability […]

The post WordPress Plugin Vulnerability Exposes 400,000 Sites to Account Takeover Attacks appeared first on Cyber Security News.

Iran-linked operators are using a trusted developer tool to conceal a backdoor called Dindoor inside Windows environments. The malware uses the Deno JavaScript and TypeScript runtime to execute encoded code, helping its activity blend into legitimate software use. Dindoor has appeared as a later-stage payload in spearphishing intrusions. Researchers observed it at U.S. software and […]

The post Iran-Linked Hackers Abuse Legitimate Developer Tool to Hide Dindoor Backdoor appeared first on Cyber Security News.

Researchers tie the LinX Coders phishing-as-a-service toolkit to 9,332 compromise events across 94 countries, with 63.7% of victims in the United States and stolen session cookies accounting for more than half of all outcomes. A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft 365 accounts in a […]

The post Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations appeared first on Cyber Security News.

Google has released Chrome 152 for Windows, macOS, and Linux, delivering 327 security fixes and improvements. The update addresses 10 critical vulnerabilities, making it an important security release for individual users and enterprise environments. Chrome 152 is rolling out as version 152.0.7977.64 for Linux and version 152.0.7977.64/.65 for Windows and macOS. Google said availability will […]

The post Google Chrome 152 Released With 327 Security Fixes, Including 10 Critical Vulnerabilities appeared first on Cyber Security News.

CISA’s latest advisory for red teams warns critical infrastructure operators that security systems can fail even if they have a lot of funding. This is because trained analysts are needed to respond to alerts effectively. The agency’s “A Tale of Two SOCs” report compares two parallel red team engagements: one against a Government Services and […]

The post CISA Red Team Breaches Critical Infrastructure to Reveal SOC and Cloud Security Gaps appeared first on Cyber Security News.

Alice, the AI trust, safety, and security company formerly known as ActiveFence, has closed a $140 million funding round led by Apax Digital Funds, with new backing from SentinelOne, Samsung Electronics, Maj Invest, MoreTech, and Phoenix Insurance, alongside existing investors Resolute Ventures, Grove Ventures, CRV, Highland Europe, Vintage Investment Partners, Norwest, NFX, and Claltech. The […]

The post AI Security Startup Alice Raises $140 Million as Enterprise AI Threats Surge appeared first on Cyber Security News.

SynkLoader is using Microsoft Teams conversations to turn routine IT support requests into a route for malware delivery. The campaign relies on impersonation rather than a software flaw, placing the decision to install a supposed fix directly in front of an employee. Attackers contact targets through Teams messages and voice phishing, also called vishing, while […]

The post SynkLoader Mimic as IT Support Personnel Attacking Users Via Microsoft Teams appeared first on Cyber Security News.

ToxNetV2 is a Linux botnet that shows how artificial intelligence can move closer to real attack operations. Instead of using a model only to write text, the malware feeds system and botnet data into an AI service, then turns selected replies into proposed commands. That design gives operators a faster way to judge what to […]

The post ToxNetV2 Linux Botnet Uses NVIDIA AI to Generate Shell and Remote SSH Attack Actions appeared first on Cyber Security News.

WhatsApp has confirmed that more than 1 billion people now use passkeys to log into the messaging app, marking one of the largest passwordless authentication rollouts in consumer tech history. Alongside this milestone, Meta’s flagship messaging platform is rolling out a major upgrade to two-step verification, replacing the long-standing six-digit PIN with a full alphanumeric […]

The post WhatsApp Passkeys Reach 1 Billion Users as Two-Step Verification Gets Stronger Passwords appeared first on Cyber Security News.

ASOS US Sales LLC reported unauthorized access to customer accounts using credentials obtained from outside the company, detected on July 28 and confirmed the next day. In a breach notification dated August 21, 2026, ASOS said it identified unusual activity involving customer accounts and launched an investigation immediately. The retailer determined that an unauthorized third […]

The post ASOS Warns Customer Accounts Were Accessed Using Compromised Login Credentials appeared first on Cyber Security News.