Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
How the SourTrade browser-assembled malware targets retail crypto traders
Researchers at Confiant have disclosed details of a malvertising campaign called SourTrade, in which the victim’s browser independently assembles the ...
Fastjson 1.x CVE-2026-16723 RCE: impact, exploits, fixes
The critical remote code execution vulnerability CVE-2026-16723 in the Alibaba Fastjson 1.x library (versions 1.2.68–1.2.83) allows an attacker to execute ...
Inside BlueNoroff’s ClickFix Kit Masquerading as Zoom and Teams
Researchers at JUMPSEC have disclosed details of an active phishing platform that, according to their findings, is linked to the ...
How the AgentForger CSRF Bug Turned ChatGPT Agents into Corporate Insiders
Researchers from Zenity Labs disclosed a CSRF-class vulnerability in the OpenAI ChatGPT Agent Builder tool, which received the codename AgentForger. ...
How Bing’s image pipeline exposed critical RCE via ImageMagick delegates
Microsoft has assigned two critical CVEs — CVE-2026-32194 and CVE-2026-32191 — to vulnerabilities in Bing’s image-processing infrastructure, each with a ...
How the wp2shell Vulnerability Chain Enables RCE on Vanilla WordPress
Two critical vulnerabilities in WordPress — CVE-2026-63030 and CVE-2026-60137 — are being actively exploited by attackers in a chained exploit ...
CVE-2026-6875: Pre-auth Sandbox Escape RCE in ServiceNow AI Platform
A critical vulnerability CVE-2026-6875 with a CVSS 9.5 score has been discovered in the ServiceNow AI Platform, allowing an unauthenticated ...
How FakeGit Exploits MCP Servers and AI Agents for StealC Theft
Researchers from Island have identified a large-scale campaign dubbed FakeGit: according to their data, around 7,600 malicious repositories on GitHub, ...
How Gemini 3.5 Flash Cyber Reimagines AI Code Defense
Google DeepMind has introduced Gemini 3.5 Flash Cyber — a specialized artificial intelligence model designed to detect, validate, and remediate ...
Qilin Ransomware Campaign Exploits PAN-OS CVE-2026-0257 Auth Bypass
The authentication bypass vulnerability CVE-2026-0257 (CVSS 7.8) in the portal and gateway components of Palo Alto Networks PAN-OS is, according ...
