Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
How CVE-2026-55040 Lets Attackers Hijack On‑Prem SharePoint
The CVE-2026-55040 vulnerability (CVSS 9.1) in the JSON Web Token validation pipeline on Microsoft SharePoint servers allows a remote unauthenticated ...
Why Mozilla Revoked Its Firefox and Thunderbird Linux Signing Key
Mozilla has revoked the cryptographic subkey (subkey) used to sign Firefox and Thunderbird downloads for Linux, after an unencrypted copy ...
Go-based macOS stealer uses ClickFix to drain crypto wallets
Researchers at Huntress have documented a campaign in which ClickFix-style attacks are used to deliver Go-based malware to macOS. The ...
How UNC6671 Uses Vishing and AitM to Breach Okta and Microsoft 365
The extortion group UNC6671 is conducting a large-scale voice phishing (vishing) campaign against financial, legal and technology organizations in North ...
Prompt-injection bugs let low-priv bots trigger privileged CI in Google ADK
Researchers at Pillar Security identified two vulnerabilities in the automation of the Google Agent Development Kit (ADK) for Python GitHub ...
Arctic Wolf exposes MFA-bypassing BEC against Microsoft 365
Researchers at Arctic Wolf Labs have recorded a large-scale phishing campaign targeting Microsoft 365 accounts. The attackers use an adversary-in-the-middle ...
Solidity Pro: malicious VS Code extension targeting Web3 developers
Researchers from Yeeth Security discovered the malicious Solidity Pro extension for Microsoft Visual Studio Code which, while masquerading as a ...
Progress Kemp LoadMaster CVE-2026-8037 Actively Exploited
On August 7, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerability CVE-2026-8037 to the Known Exploited Vulnerabilities ...
Snowflake Data Theft: Canadian Behind UNC5537 Admits Guilt
26-year-old Canadian Connor Riley Moucka
Mass False Positives Lock Blogger Sites After August 4, 2026 Glitch
On August 4, 2026, the automatic moderation system of Google Blogger began massively blocking legitimate blogs, mistakenly classifying them as ...
