CyberNews

A sophisticated attack campaign has been discovered, exploiting a rare vulnerability in Microsoft’s code signing process to spread malware. The attackers created a fake LastPass Authenticator installer that not only bypassed antivirus software but also disabled security solutions like endpoint detection and response (EDR) tools. The malicious package was signed with a Microsoft-issued digital certificate, … Read more

Microsoft has announced that it will be retiring its Microsoft 365 Companion apps, including Calendar, People, and Files, by December 16th this year. This decision comes roughly a year after these apps were automatically rolled out to compatible devices with the Microsoft 365 desktop client apps. Admins are being urged to remove these apps from … Read more

A newly discovered vulnerability in WordPress, known as Click2Shell, has been identified as a pre-authenticated remote code execution chain that allows attackers to install malicious themes and execute arbitrary PHP code on affected servers. This security issue, discovered by security researcher Paulos Yibelo of pwn.ai, was addressed last week with the release of WordPress version … Read more

Google Faces €403 Million Fine for GDPR Violations Related to Location Data Exploitation The European Union’s data protection authority, the French National Commission on Informatics and Liberty (CNIL), has fined Google a staggering €403 million for violating General Data Protection Regulation (GDPR) rules. The fine stems from the tech giant’s handling of location data, which … Read more

A sophisticated cyberattack campaign has compromised over 30,000 devices worldwide, resulting in a staggering $10.71 million cryptocurrency heist. The attackers used a novel approach, exploiting vulnerabilities in online interview platforms to gain unauthorized access to sensitive information and execute malicious code. This brazen attack highlights the dark side of remote work and the importance of … Read more

A sophisticated phishing campaign has been uncovered, where attackers are using a fake LastPass Authenticator installer to compromise Windows systems. The malicious program exploits a Microsoft-signed driver to disable antivirus and endpoint detection and response (EDR) software, effectively allowing the attackers to remain undetected on compromised machines. The attack begins with a phishing email that … Read more

The FBI’s CJIS Security Policy has undergone significant changes in recent years, with the latest update, version 6.1, published in June 2026. This modernized policy is closely aligned with NIST SP 800-53 and addresses omissions, corrections, and additions highlighted throughout 2025. For security teams already working towards the requirements introduced in v6.0, the overall direction … Read more

A Critical Issue Fixed: Microsoft Resolves Broken Copy-Paste Functionality in Excel Microsoft has addressed a significant problem affecting Excel users after installing its September 2026 security updates. The issue, which was confirmed by customer reports on Reddit and the company’s Q&A forums, causes copy-and-paste operations to fail silently without providing any error messages or alerts. … Read more

Google’s €403 Million Fine Highlights Location Data Privacy Concerns In a major blow to Google’s data collection practices, Ireland’s Data Protection Commission (DPC) has imposed a record-breaking fine of €403 million on the tech giant for violating the General Data Protection Regulation (GDPR). The hefty penalty is the result of an investigation that exposed Google’s … Read more

Cybersecurity researchers have uncovered a sophisticated backdoor, dubbed “TASK#STOMP,” which has been lurking in PowerShell environments on Windows systems. This malicious tool allows attackers to quietly extract sensitive information, including documents, Wi-Fi passwords, and clipboard data, from compromised machines. The impact is significant: TASK#STOMP has been identified as a key component of an attack chain … Read more