Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
CVE-2026-6875: Pre-auth Sandbox Escape RCE in ServiceNow AI Platform
A critical vulnerability CVE-2026-6875 with a CVSS 9.5 score has been discovered in the ServiceNow AI Platform, allowing an unauthenticated ...
How FakeGit Exploits MCP Servers and AI Agents for StealC Theft
Researchers from Island have identified a large-scale campaign dubbed FakeGit: according to their data, around 7,600 malicious repositories on GitHub, ...
How Gemini 3.5 Flash Cyber Reimagines AI Code Defense
Google DeepMind has introduced Gemini 3.5 Flash Cyber — a specialized artificial intelligence model designed to detect, validate, and remediate ...
Qilin Ransomware Campaign Exploits PAN-OS CVE-2026-0257 Auth Bypass
The authentication bypass vulnerability CVE-2026-0257 (CVSS 7.8) in the portal and gateway components of Palo Alto Networks PAN-OS is, according ...
Researchers Show Invisible Screen Prompts Can Lead to RCE on Mobile AI Agents
A team of researchers from Simon Fraser University, the Chinese University of Hong Kong, Shandong University and the Xingtu (QAX) ...
Remote Code Execution in AWS Kiro IDE Through MCP Configuration Abuse
Researchers from Intezer together with Kodem Security discovered in the agentic IDE AWS Kiro an attack chain that allowed an ...
Inside the WebDAV Malware Delivery Lab Behind the Mexico CURP Scam
Researchers at Rapid7 discovered an unsecured malware delivery server containing 1,048 files — ranging from phishing lure templates and filename ...
How HollowGraph Uses Microsoft 365 Calendars for Covert C2
Researchers from Group-IB have discovered a spyware implant called HollowGraph that uses the calendar of a compromised Microsoft 365 account ...
Long-Lived Daxin Rootkit and Stupig Backdoor in Taiwanese Tech Network
Teams from Symantec and the Carbon Black Threat Hunter Team have discovered an active instance of the Daxin rootkit on ...
How xAI’s Grok Build Tool Sent Full Git Repositories to Its Cloud
The Grok Build CLI tool from xAI, designed to help with writing code, was, according to a researcher, uploading to ...
