Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
WhatsApp Desktop and Web Targeted in Global VBScript RMM Campaign
According to researchers at Kaspersky, an active campaign has been identified in which malicious Visual Basic Script (VBScript) files are ...
How OpenAI’s GPT-5.5-Cyber Targets Software Vulnerabilities
OpenAI has announced the release of an updated GPT-5.5-Cyber model for trusted security professionals as part of the Daybreak initiative, ...
DifyTap: Cross-Tenant Data Exposure in the Dify AI Platform
Four vulnerabilities have been discovered in the open platform for building AI agents Dify, collectively dubbed DifyTap — two of ...
Elastic Security Labs analyzes OXLOADER and CastleStealer campaign
Researchers at Elastic Security Labs have published a technical analysis of a previously unknown malware loader, OXLOADER, which is used ...
How Android Developer Verification Changes App Installation
Starting from 30 September 2026, certified Android devices in Brazil, Indonesia, Singapore and Thailand will begin blocking standard installation of ...
How the AryStinger Botnet Exploits End-of-Life D-Link Routers
Researchers from Qianxin XLab have reported a previously unknown botnet, AryStinger, which they say has compromised more than 4,000 outdated ...
How AryStinger Hijacks Old Routers and QNAP NAS for Covert Recon
Researchers from QiAnXin XLab report on a new malware family, AryStinger, which infects legacy home routers based on Realtek RTL819X ...
152 Malicious Chrome Wallpaper Extensions Used for Ad Fraud
According to researchers at Socket, 152 malicious extensions were discovered in the Chrome Web Store, disguised as tools for installing ...
Gravity SMTP flaw leaks email API keys via unauthenticated endpoint
The Gravity SMTP plugin for WordPress, installed on approximately 100,000 sites, is being massively exploited via the CVE-2026-4020 vulnerability (CVSS ...
Law Enforcement Dismantles SocGholish WordPress Malware
Law enforcement agencies in the Netherlands, Canada, Germany, and the United States have conducted a coordinated operation to dismantle the ...
