#news


BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Sep 3, 2026 // 00:23

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a […]

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

Sep 3, 2026 // 00:22

A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational […]

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Sep 3, 2026 // 00:22

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration names a command that the […]

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

Sep 3, 2026 // 00:22

An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. “The campaign has targeted users looking to download […]

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Sep 3, 2026 // 00:22

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set […]

Dropbox accounts breached through Lenovo email verification flaw

Sep 3, 2026 // 00:17

Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo’s email verification process to register fraudulent Lenovo […]

Ransomware protection for MSPs: A 6-point checklist for faster recovery

Sep 3, 2026 // 00:17

Ransomware protection for MSPs should deliver six tested outcomes: reduce exposure, detect activity before encryption, provide 24/7 response, preserve isolated recovery points, recover cleanly and […]

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

Sep 3, 2026 // 00:17

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. The flaw is present […]

WordPress backup plugin flaw exposes millions of sites to takeover attacks

Sep 3, 2026 // 00:17

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control […]

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Sep 3, 2026 // 00:17

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. According to […]

Previous 1 … 50 51 52 53 54 … 388 Next