Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Critical CVE-2026-25874 Vulnerability in Hugging Face LeRobot Exposes AI Robotics to Remote Code Execution
A critical vulnerability CVE-2026-25874 has been identified in the open-source robotics platform LeRobot by Hugging Face, enabling unauthenticated remote code ...
Apple Patches iOS Notification Bug That Left Deleted Signal Messages on iPhones (CVE-2026-28950)
Apple has released an unscheduled security update for iOS and iPadOS to fix a critical flaw in the Notification Services ...
DOJ Sentences Cybersecurity Professionals for Supporting BlackCat Ransomware Operations
The U.S. Department of Justice (DOJ) has sentenced two cybersecurity professionals to four years in prison each for assisting the ...
Fake CAPTCHA Pages Fuel International SMS Fraud and TDS‑Driven Crypto Scams
A newly documented telecom fraud campaign shows how attackers are combining fake CAPTCHA pages, premium‑rate international numbers and advertising infrastructure ...
NASA Inspector General Exposes Sophisticated Spear‑Phishing Operation Against Aerospace and Defense Research
The NASA Office of Inspector General (OIG) has disclosed details of a sophisticated spear‑phishing and cyber‑espionage campaign in which a ...
New GopherWhisper APT Uses Go-Based Malware and Cloud C2 to Spy on Mongolian Government
A previously unknown advanced persistent threat (APT) group, dubbed GopherWhisper, has been linked to a cyber‑espionage campaign targeting government entities ...
Anthropic Project Glasswing: AI Vulnerability Discovery and the New Reality of Cyber Defense
Anthropic’s decision to delay the public release of Project Glasswing is one of the clearest signals of how rapidly artificial ...
Apple Patches iOS Notification Vulnerability CVE-2026-28950 That Exposed Signal Messages
Apple has released a security update for iOS and iPadOS that closes a privacy‑impacting flaw in the Notification Services subsystem. ...
Harvester APT Deploys GoGra Linux Backdoor Using Microsoft Graph and Outlook as Covert C2
A new campaign attributed to the Harvester advanced persistent threat (APT) group is delivering a GoGra Linux backdoor that hides ...
FIRESTARTER Backdoor on Cisco ASA: New APT Campaign Targets Network Perimeter Devices
In September 2025, a U.S. civilian federal agency became the victim of a highly targeted network perimeter attack involving a ...
