CyberNews As AI technology continues to advance at breakneck speed, it’s no surprise that its impact on cybersecurity is being felt in every corner of the industry. The latest threat landscape is characterized by AI-powered attacks that can move faster than human defenders, leaving traditional security models struggling to keep pace. To address this issue, a … Read more
A sophisticated cyber threat has been uncovered, operating entirely from Microsoft’s cloud infrastructure and using advanced tactics to evade detection. The malware framework, dubbed “TwinLoot,” leverages various Microsoft services to disguise its activity as legitimate cloud traffic, making it a challenging problem for security professionals. TwinLoot uses a modular approach, employing different Microsoft services for … Read more
**Critical Vulnerability Exposed: CoSnitch Attack Tricks Copilot into Mapping Out Architecture** A sophisticated threat actor can trick a Microsoft Copilot instance into revealing its own security weaknesses, paving the way for a novel prompt injection attack. This is according to new research published by Varonis Threat Labs, which discovered a “meta-hacking” technique that manipulates the … Read more
A Critical GitLab Vulnerability Puts Self-Managed Users in a Tight Spot GitLab’s security team has identified a critical flaw in its software development and DevOps platform, affecting all self-managed versions of its Community Edition (CE) and Enterprise Edition (EE). The bug, designated as CVE-2026-19478, is a code-injection vulnerability that can be exploited by an attacker … Read more
Comcast’s New Xfinity Shield Platform Turns WiFi into Motion Detectors without Cameras or Sensors In a bid to revolutionize home protection, Comcast has integrated WiFi-based motion detection into its new Xfinity Shield platform. This feature, known as WiFi Motion, utilizes the radio signals between Xfinity gateways and stationary devices on the network to detect movement … Read more
A critical security vulnerability in GitLab’s software development and DevOps platform has been discovered, allowing attackers to manipulate or delete publicly accessible projects and user data with ease. The bug, known as CVE-2026-19478, is a code-injection flaw that can be exploited without any authentication or user interaction required. This means that even if an organization … Read more
Comcast’s New Feature Uses WiFi Signals to Detect Home Motion, Raising Concerns About Privacy and Accuracy In a bid to enhance home security, Comcast has announced a new feature that uses WiFi signals to detect motion within homes. Dubbed “WiFi Motion,” this technology is part of the company’s Xfinity Shield platform, which combines cybersecurity, physical … Read more
A group of hackers calling themselves “Ransom Busters” has claimed responsibility for infiltrating servers used by ransomware operators, and is now demanding payment from those same victims in exchange for not revealing their sensitive information. The move has left many experts scratching their heads, wondering how this could happen and what it means for the … Read more
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets, Leaving Thousands Vulnerable A severe vulnerability in the popular open-source machine learning platform MLflow has been exploited by attackers to steal cloud credentials and sensitive secrets from thousands of organizations. The flaw, which enables cross-domain privilege escalation, allows hackers to bypass security controls and … Read more
**Critical Flaw in Microsoft Copilot Personal Exposes Data from Connected Apps** A newly discovered vulnerability in Microsoft’s Copilot Personal has been found to allow a single click to exfiltrate sensitive data from connected applications, putting millions of users at risk. The issue lies in the way Copilot Personal handles user permissions and access control, allowing … Read more