Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Shadow-Earth-053, ShadowPad and phishing clusters in Asia
Researchers have recorded a new China-aligned espionage activity cluster, SHADOW-EARTH-053, targeting government and defense organizations in South, East and Southeast ...
Copy Fail (CVE-2026-31431): Linux Kernel LPE Actively Exploited
CISA has added the CVE-2026-31431 (Copy Fail) vulnerability in the Linux kernel to its CISA KEV Known Exploited Vulnerabilities catalog, ...
Inside the AccountDumpling phishing operation against Facebook Business owners
The Vietnamese operation AccountDumpling uses the Google AppSheet service as a “phishing relay” to send emails on behalf of Meta ...
PromptMink: North Korean Supply Chain Attacks Against npm, Web3 Developers and Open Source Ecosystems
A newly documented campaign, dubbed PromptMink, is targeting the open source ecosystem and Web3 developers through malicious npm packages, fake ...
VECT 2.0 Ransomware: Critical Encryption Flaw Turns RaaS into a Data-Wiping Wiper
Recent analysis of the VECT 2.0 ransomware family reveals a critical design flaw that effectively transforms this ransomware-as-a-service (RaaS) operation ...
Critical Gemini CLI and Cursor IDE Vulnerabilities Expose AI Development Security Risks
Google has remediated a critical remote code execution (RCE) vulnerability in its Gemini CLI tools, while independent researchers have disclosed ...
Copy Fail (CVE-2026-31431): New Linux Kernel Bug Enables Easy Root Privilege Escalation
A newly disclosed Linux kernel vulnerability, dubbed Copy Fail and tracked as CVE-2026-31431, has been rated CVSS 7.8 and allows ...
Checkmarx Supply Chain Attack and Dark Web Data Leak: Expert Analysis of the Incident
Application security vendor Checkmarx is continuing to investigate a significant software supply chain attack that has reportedly led to internal ...
Critical LiteLLM Vulnerability CVE-2026-42208: SQL Injection Threatens AI Gateway Security
The open source AI gateway LiteLLM by BerriAI is at the center of a serious security incident. A critical vulnerability ...
Critical cPanel Authentication Vulnerability: What Hosting Providers and Site Owners Must Do Now
One of the world’s most widely used hosting control panels, cPanel, has received urgent security updates to address a serious ...
