News Archive
2287 stories · page 81 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
WordPress Core Flaw Allows Unauthenticated Code Execution
A critical vulnerability has been reported in the core of WordPress, enabling unauthenticated attackers to achieve arbitrary code execution on affected websites. The flaw, identified by Adam Kues of Searchlight Cyber, was present in WordPress versions 6.9 and 7.0. WordPress has subsequently released patches and initiated forced updates to mitigate the risk across its user base.
Abbott Investigates Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is currently investigating two distinct cybersecurity incidents, one of which the company has confirmed involved unauthorized access to internal systems within its Cancer Diagnostics business. The second incident involves claims by a separate threat actor regarding a breach of the company's LabCentral customer portal.
OpenSSL Flaw Allows Denial-of-Service via Small TLS Requests
A denial-of-service vulnerability has been identified in OpenSSL, allowing attackers to disrupt service by sending small TLS requests. The flaw, internally dubbed "HollowByte," can be triggered with an 11-byte TLS request, leading to significant memory allocation issues on vulnerable servers.
Inc Ransomware Exploits SonicWall SMA Zero-Days
Reports indicate that the Inc ransomware group is currently leveraging two previously undisclosed zero-day vulnerabilities within SonicWall's Secure Mobile Access (SMA) appliances. This active exploitation has been observed to grant attackers root-level control over the compromised devices, which can then be used as a pivot point for broader malicious operations within a targeted network.
Metasploit Adds Linux Fetch Multi Payload for Architecture Agnostic Exploits
The Metasploit Framework has introduced a new Linux Fetch Multi payload family, designed to simplify exploitation by automatically identifying and delivering the correct architecture-specific payload to a target Linux host. This enhancement means that users no longer need to manually determine a target's architecture when selecting a payload, as a single payload and handler can now serve…
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver RAT
Researchers have uncovered a software supply chain attack involving seven malicious npm packages targeting the Vite frontend tooling ecosystem. These packages, collectively named ViteVenom, were found to employ a sophisticated, multi-tier blockchain-based command-and-control (C2) infrastructure to deliver a remote access trojan (RAT) to compromised systems.
Microsoft SharePoint Server RCE Vulnerability Exploited in the Wild
Microsoft has confirmed active exploitation of a critical remote code execution (RCE) vulnerability, CVE-2026-58644, affecting on-premises deployments of its SharePoint Server. The vulnerability, which stems from the deserialization of untrusted data (CWE-502), allows an unauthenticated attacker to execute arbitrary code with a CVSS v3.1 score of 9.8 (Critical).
HollowByte DDoS flaw bloats OpenSSL server memory
A denial-of-service vulnerability, dubbed HollowByte, has been identified in OpenSSL, allowing unauthenticated attackers to deplete server memory with minimal data transmission. The OpenSSL team has addressed the flaw in recent updates, though no CVE identifier has been assigned. Organizations are strongly advised to update their OpenSSL installations to a patched version.
Cyberattack Disrupts Operations at Japanese Food Giant Nichirei
Nichirei Corporation, a major Japanese food company, confirmed that a cyberattack on its servers on July 13, 2026, disrupted its logistics and shipment operations. The Tokyo-headquartered company, founded in 1942 and known for its frozen food business, operates globally through numerous subsidiaries.
NadMesh Botnet Targets Exposed AI Services for Cloud Credentials
A new botnet, named NadMesh, has been observed actively targeting exposed artificial intelligence (AI) services to steal cloud credentials. Written in Go, NadMesh is specifically designed to operate within cloud environments, focusing its efforts on acquiring AWS keys and Kubernetes tokens from vulnerable AI platforms.
Blind Trust in AI Creates Cybersecurity Risks
A recent report highlights a growing cybersecurity concern stemming from an overreliance on artificial intelligence models, specifically when these models are granted both interpretive and executive authority without human intervention. The core issue identified is the absence of critical human oversight in the loop, which can pave the way for unintended security vulnerabilities and potential…
Chinese APT Group Linked to DigiCert Breach and Code Signing Certificate Theft
A recent report indicates that a Chinese Advanced Persistent Threat (APT) group has been implicated in a security breach at DigiCert, leading to the theft of code-signing certificates. The group, identified by researchers under the monikers GoldenEyeDog and CylindricalCanine, is known for its previous targeting of sectors such as gambling and gaming.
Attackers Use Text Salting to Evade AI-Powered Spam Filters
Cybersecurity firm Barracuda has reported a significant increase in phishing attacks employing "text salting," an older technique now being used to bypass AI-powered email filters. Since April, Barracuda has detected over one million retail-themed phishing attempts utilizing this method. While text salting has historically been effective against traditional secure email gateways, Barracuda…
Microsoft Discusses AI and Supply Chain Threats at Black Hat
Microsoft Security is scheduled to present at Black Hat USA 2026, where the company will discuss how threat actors are increasingly targeting trusted systems to scale their attacks. The presentations will focus on threats to software, services, and artificial intelligence (AI) systems. Microsoft plans to share insights into earlier identification of these threats and emphasize the…
Government Agencies Face Daily Ransomware Attacks, Study Warns
Government agencies worldwide are experiencing ransomware attacks at an average rate of one per day, according to a recent analysis by Comparitech researchers. The study, which examined incidents targeting government entities between January and June 2026, recorded 187 attacks during this six-month period. This represents a 13% increase from the 165 attacks observed in the latter half of 2025.
Ernst & Young Reports Data Breach After Support System Hack
Ernst & Young (EY) has begun notifying clients of a data breach stemming from unauthorized access to a third-party support ticket system utilized by its IT department. The professional services giant, one of the world's largest, discovered unusual activity on its networks on April 23 and launched an investigation with external cybersecurity specialists.
23andMe Settles Data Breach Lawsuit for $18 Million
Genetic testing firm 23andMe has agreed to an $18 million settlement with a coalition of 42 U.S. attorneys general following a data breach that occurred in October 2023. The settlement, announced by New York Attorney General Letitia James, also imposes new data protection requirements on the company. New York will receive over $705,000 from the settlement.
Iran Tracks US Military Phones, macOS Malware, Data Breaches
Recent reports indicate a multi-faceted threat landscape, with Iran reportedly engaging in tracking the mobile phones of U.S. military personnel. This intelligence surfaces alongside the emergence of a new macOS malware variant named CrashStealer. Further incidents include identified vulnerabilities in OpenClaw AI agents, a ransomware attack targeting the naval defense firm TKMS, and a data…
Two Scattered Spider members sentenced to 66 months for London transport cyberattack
Two individuals identified as leading members of the Scattered Spider cybercrime group, Thalha Jubair and Owen Flowers, have been sentenced to 66 months in jail in the United Kingdom for a 2024 cyberattack that disrupted Transport for London operations. The UK's National Crime Agency announced the sentencing on Thursday, following their arrests in September 2025 and subsequent guilty pleas.
Cybercriminals Seek Clean Residential Proxies for Fraud
Cybercriminals engaged in carding, the illicit use of stolen payment card data, are increasingly seeking "clean" residential proxies to bypass advanced fraud detection systems. Analysis of 2,889 underground forum posts over the past two years reveals a shift in how these actors evaluate and utilize proxy infrastructure. Rather than viewing residential proxies as a standalone anonymity tool,…
Phishing Emails Use Fake Font Files to Deliver Windows Malware
A recent report indicates that threat actors are employing a novel technique involving fake font files to distribute malware via phishing emails, targeting Windows systems. These campaigns leverage specially crafted font files that, upon being opened by a user, can trigger the execution of arbitrary code, ultimately leading to a malware infection. The emails themselves are designed to appear…
North Korean Hackers Use SVG Images to Hide Malware in Fake Coding Tests
Reports indicate that North Korean threat actors, linked to the "Contagious Interview" campaign, are leveraging steganography within Scalable Vector Graphics (SVG) image files to conceal malware. This sophisticated technique is being deployed as part of a broader campaign that utilizes deceptive job postings and fabricated coding challenges to distribute malicious payloads. The ultimate goal…
Dairy producer Fairlife halts US production due to cyber incident
Fairlife, a dairy producer fully owned by The Coca-Cola Company, has temporarily suspended its U.S. production following a cyber incident detected on Thursday. The company confirmed that the intrusion has not affected product quality or safety, and its Canadian operations remain unaffected.
Multiple Vulnerabilities Found in WolfSSL, GeoVision, and VTK-DICOM
Multiple vulnerabilities have been identified and patched in WolfSSL, GeoVision, and VTK-DICOM, according to a recent disclosure by Cisco Talos. The vulnerabilities, discovered by the Talos Vulnerability Discovery & Research team, have all been addressed by their respective vendors in accordance with Cisco's disclosure policy.