CyberNews D-Link Warns of Maximum-Security Flaw in DIR-822A Routers, Exposing Millions to Remote Attacks D-Link has issued a critical warning about a maximum-severity vulnerability affecting its legacy DIR-822A dual-band Wi-Fi routers. The security flaw, identified as CVE-2026-86296, can be exploited without authentication or user interaction, allowing attackers to potentially crash the device’s DHCP daemon or execute … Read more
Google Workspace Breaches Reveal a Sobering Truth: Trust and Authorization Can Be Exploited with Ease Tomorrow, CyberNews.work will host a live webinar that sheds light on real-world Google Workspace breaches, exposing the vulnerabilities that allowed attackers to gain access to sensitive data. What’s surprising is not the sophistication of the attacks, but rather how easily … Read more
Cybersecurity Experts Takedown EvilTokens PhaaS Platform After Compromising 12,000 Microsoft Accounts A major disruption has been dealt to the EvilTokens platform, a phishing-as-a-service (PhaaS) operation that compromised over 12,000 Microsoft accounts across more than 10,000 organizations worldwide. The takedown effort was led by Microsoft’s Digital Crimes Unit (DCU), in collaboration with law enforcement and identity … Read more
A catastrophic flaw in the VeloCloud Orchestrator has been actively exploited, granting attackers unfettered access to enterprise networks through certificate-based setups. The vulnerability, which holds a CVSS (Common Vulnerability Scoring System) rating of 10.0 – the highest severity level – affects various organizations that utilize the platform for network management and security. The VeloCloud Orchestrator … Read more
A new and insidious form of cyber threat has emerged, leveraging AI-powered agents to rewrite the rules of lateral movement. This sophisticated attack vector exploits identity exposure to unlock active attack paths, allowing hackers to navigate corporate networks with unprecedented ease. The implications are dire, as these AI-driven attacks can evade traditional security measures and … Read more
A Critical SharePoint Flaw Enables Remote Code Execution, Exposing Users Worldwide Microsoft has acknowledged a critical vulnerability in its widely-used collaboration platform, SharePoint. Initially listed as a spoofing issue, the flaw was later found to allow an attacker with authenticated access to execute arbitrary code remotely. This significant security weakness affects a vast number of … Read more
A newly discovered vulnerability in the Linux kernel is giving attackers the keys to the kingdom, allowing them to access and modify sensitive data on vulnerable systems. The flaw, which affects ARM64 virtual machines running under the Kernel-based Virtual Machine (KVM) hypervisor, enables malicious actors to bypass traditional security boundaries and gain read-write access to … Read more
Cybersecurity teams around the world are bracing themselves for a potentially catastrophic threat that has been lurking in the shadows, and it’s all about how attackers exploit identity exposure to gain unfettered access to sensitive systems. The DORA (Detect Observe Respond Act) framework is still reeling from its second year of implementation, and what’s become … Read more
A Critical Vulnerability in VeloCloud Orchestrator is Being Actively Exploited, Putting Certificate-Based Setups at Risk A newly discovered flaw in the VeloCloud Orchestrator has been assigned a CVSS (Common Vulnerability Scoring System) rating of 10.0, indicating that it’s one of the most severe vulnerabilities we’ve seen this year. This critical weakness is being actively exploited … Read more
A worrying trend has emerged in the world of cybersecurity, as threat actors have discovered a new way to breach even the most secure networks. By exploiting identity exposure, attackers are able to create active attack paths that allow them to move laterally within an organization’s infrastructure with unprecedented ease. This technique relies on mapping … Read more