News Archive
2287 stories · page 82 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Tennis Analogy Highlights Cybersecurity's Imperfect Nature
A China-linked threat actor, UAT-7810, is actively expanding its network of Operational Relay Boxes (ORBs) by exploiting known vulnerabilities in unpatched Ruckus and ASUS routers. The group is deploying a new set of custom malware, including updated versions of the "LONGLEASH" and "DOGLEASH" backdoors, to establish covert infrastructure for other advanced persistent threat (APT) groups.
New Helix Group Targets SharePoint Data via Vishing and MFA Abuse
A new data extortion group, dubbed Helix, has emerged, employing voice phishing (vishing) and multi-factor authentication (MFA) abuse to compromise SharePoint environments and exfiltrate data. The group's primary objective is to extort victim organizations by threatening to publish stolen information or sell it to other cybercriminals.
AI to Drive More Windows Security Updates, Microsoft Says
Microsoft has indicated that users of its Windows operating system should anticipate an increase in the volume of security updates. This projected rise is attributed to the company's expanding reliance on artificial intelligence (AI) to identify vulnerabilities within its codebase.
Forg365 Phishing Platform Leverages AI for Microsoft 365 Account Theft
A new phishing-as-a-service (PhaaS) platform named Forg365 has emerged, specializing in the theft of Microsoft 365 accounts. The platform integrates adversary-in-the-middle (AiTM) and device code phishing techniques with AI-assisted lure generation, and provides a browser extension for persistent access to compromised accounts.
Summer Staffing Shortages Expose IT Security Risks
Cybersecurity experts are warning that organizations face heightened risks during summer months due to reduced IT staffing levels, creating opportunities for threat actors. Data indicates a significant increase in cyberattacks during holiday periods, with summer being particularly vulnerable as security teams operate with diminished capacity.
Microsoft to Retire OWA Light Client in Exchange Server
Microsoft has announced its intention to disable and ultimately remove the Outlook Web Access (OWA) Light client from Exchange Server in an upcoming update, projected for August 2026. The company stated that the decision aims to reduce legacy surface area, streamline engineering efforts, and allow for continued improvements to the standard Outlook on the web experience.
AI Coding Tools Vulnerable to Decades-Old Hacking Technique
AI-powered coding assistants are susceptible to a security flaw that could allow attackers to execute malicious code on a developer's machine. Researchers have dubbed this attack method "GhostApproval." The vulnerability exploits a well-established hacking technique, demonstrating a potential risk as AI tools become more integrated into software development processes.
Chrome 150 Update Fixes 27 Security Flaws
Google has released an update for its Chrome browser, version 150, which addresses a total of 27 security vulnerabilities. Among the patched flaws, 13 were identified as use-after-free bugs, with two of these specifically noted as critical in severity. This update is crucial for users to maintain the security posture of their browsing environment.
8Layers Secures $2.9 Million for Identity Security Platform
Spanish cybersecurity startup 8Layers has announced the successful closure of an extended pre-seed funding round, securing $2.9 million. This investment comes only two months after the company launched its digital identity protection platform.
AI Coding Agents Can Be Tricked Into Executing Malicious Code
A new vulnerability has been reported concerning AI coding agents, specifically those designed to assist with code development and security analysis. Researchers have demonstrated that these agents, including Anthropic's Claude Code and OpenAI's Codex, can be manipulated into executing malicious code rather than performing their intended function of identifying security vulnerabilities. This…
Tenda Firmware Vulnerability Allows Unauthenticated Admin Access
A critical vulnerability has been identified in the firmware of Tenda devices, allowing attackers to gain administrative access without authentication. The flaw, tracked as CVE-2026-11405, affects the web management interface of the affected devices.
Fake 7-Zip Installers Hijack Devices for Proxy Network
A sophisticated operation has been discovered that utilizes fake software installers, specifically those mimicking the popular 7-Zip file archiver, to compromise user devices and enlist them into a large-scale proxy network. This campaign, attributed to a threat group identified as Lurking Lizard, has been active since at least August 2022 and has reportedly ensnared over 230,000 devices.
Honeypot Researcher Finds Bot's Plea for Help
A cybersecurity researcher operating a honeypot has observed unusual network activity from a bot that appears to be a distressed plea for assistance. The bot, rather than engaging in typical malicious scanning or exploitation, utilizes a specific URL path to convey a message that suggests a person in Belarus is seeking help.
When AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First
The rapid acceleration of vulnerability discovery, particularly through AI-powered tools, is outpacing the ability of organizations to patch them, creating a critical need to prioritize remediation efforts based on actual exploitability rather than theoretical severity. This challenge is being addressed by the Athena coalition, an industry initiative launched by Chainguard to coordinate…
Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation
Ubiquiti has released security updates to address seven vulnerabilities in its UniFi OS, including a critical flaw that could allow for command injection. The most severe of these, CVE-2026-50746, carries a CVSS score of 10.0 and affects the UniFi Connect Application, versions 3.4.16 and earlier. This application is used for managing commercial building systems like smart lighting and EV chargers.
Greek victims sue Intellexa over Predator spyware
Eight Greek citizens who were targeted with Predator spyware have filed a lawsuit against the surveillance technology manufacturer Intellexa and 13 individuals associated with the company. The plaintiffs are seeking approximately €7.6 million (about $8.7 million) in compensation for the alleged violation of their privacy, the confidentiality of their communications, and their personal data.
Cash App Owner to Pay $45 Million Over Lax Security Claims
Block, Inc., the parent company of the Cash App payment service, has agreed to pay $45 million to settle allegations from 46 state attorneys general concerning the app's security practices and user disclosures. The states claimed that Cash App misled users about its security measures, failed to adequately protect them from fraud, and did not provide promised dispute resolution.
Accenture Confirms Security Incident After Hacker Claims 35GB Source-Code Theft
Accenture has confirmed it is investigating a security incident after a cybercriminal put what they describe as a large trove of the company's internal data up for sale. The consulting and technology firm said it is aware of the matter and has already dealt with its source, but it has not confirmed that any data was actually taken.
FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices
The cybersecurity landscape is grappling with the fallout from "FortiBleed," a widespread credential abuse campaign targeting internet-exposed FortiGate devices. Public reports emerged in June 2026 detailing extensive datasets containing Fortinet-related URLs, device records, usernames, and credentials. This activity is not attributed to a single new vulnerability but rather the reuse of…
AI Coding Tools Trigger Endpoint Security Rules
AI-powered coding assistants are causing a stir by inadvertently triggering endpoint security software. Tools such as Cursor, Claude Code, and OpenAI Codex have been observed to set off behavioral detection rules, which are designed to flag malicious activity.
Protecting Microsoft at AI speed: How SFI proactively hardens our cloud
Microsoft has developed an internal artificial intelligence system designed to proactively assess and enhance the security of its cloud infrastructure. This AI-driven approach operates at a speed commensurate with the vast scale and intricate nature of Microsoft's hyper-scale cloud environments.
Accenture Confirms Data Breach Following Source Code Theft Claim
Accenture has confirmed a data breach following claims of source code theft. The company stated that the incident has been contained and remediated, and that there has been no impact on its operations or service delivery. The confirmation comes after reports surfaced regarding the alleged compromise of Accenture’s systems.
China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors
Cybersecurity researchers have identified an expansion in the arsenal of a China-linked advanced persistent threat (APT) group, known for its operations under the name LapDogs. This threat actor has reportedly introduced new malware components, specifically focusing on compromising small office/home office (SOHO) routers. The newly identified backdoors have been named LongLeash, DogLeash, and…
RedWing Android Spyware Sold as a Service on Telegram
Cybersecurity researchers have identified a new Android spyware strain, dubbed RedWing, being distributed as a malware-as-a-service (MaaS) through the Telegram messaging platform. This operation provides criminals with sophisticated tools to hijack mobile devices and steal sensitive banking credentials, even if they possess limited technical expertise. The RedWing MaaS is characterized by…