CyberNews A Devastating Data Breach Hits Gyazo, Exposing 23.6 Million User Records Gyazo, a popular cloud-based screenshot and screen-recording tool used by millions of gamers worldwide, has fallen victim to a massive data breach. Hackers exploited a server vulnerability on September 11, 2026, stealing an astonishing 23.62 million user records from the platform’s database. The incident … Read more
Cybersecurity researchers have uncovered a sophisticated exploit technique that allows repository owners to swap code across multiple AI-powered coding agents, highlighting the ongoing cat-and-mouse game between hackers and defenders in the world of software development. Plugin4Shell is the name given to this new attack vector, which relies on manipulating the behavior of four widely-used AI … Read more
A Critical Security Risk Remains Lurking in Plain Sight – Thousands of Websites Still Linked to Abandoned CDN Domain A significant cybersecurity vulnerability has been discovered, with thousands of websites still using an abandoned Content Delivery Network (CDN) domain that was re-registered after being left dormant for years. This issue exposes a critical security risk, … Read more
A Critical Azure AI Flaw Exposes Organizations to Catastrophic Privilege Escalation Attacks Microsoft has issued an emergency patch for a critical vulnerability in its Azure AI Foundry, a cloud-based artificial intelligence platform used by thousands of organizations worldwide. The flaw, rated CVSS 10.0 – the highest severity rating possible – enables attackers to escalate privileges … Read more
A New Rust Backdoor Emerges, Leveraging Private GitHub Repositories for Command and Control In a concerning development, the Transparent Tribe threat group has unveiled a new backdoor crafted using the Rust programming language. Dubbed “Rust-Backdoor,” this malware variant is notable for its reliance on private GitHub repositories to facilitate command and control (C2) communications. The … Read more
As fast-growing companies continue to scale, they’re often faced with a daunting task: protecting their sensitive data and systems from increasingly sophisticated cyber threats. One key area of concern is Google Workspace, a suite of cloud-based productivity tools used by millions worldwide. But with so many security controls available, it’s not always clear which ones … Read more
Malware is Spreading Through Popular Developer Tool, Putting Millions of Chrome Extension Users at Risk A sophisticated malware campaign has been discovered spreading through 13 popular npm packages, compromising millions of users who rely on these developer tools. WeaselBiscuit Stealer, as it’s being called, infiltrates Chrome extensions by exploiting a vulnerability in the way these … Read more
A Critical Vulnerability in Popular Code Repositories Exposes Developers’ Identity and Proprietary Code A severe security flaw has been discovered in several popular code repositories, allowing attackers to exploit a vulnerability that exposes developers’ identities and proprietary code. The issue, dubbed “Plugin4Shell,” affects numerous repository owners who utilize plugin-based systems to manage their projects. The … Read more
A recently abandoned CDN (Content Delivery Network) domain has been re-registered, leaving thousands of websites vulnerable to potential security breaches. The news highlights a concerning trend in cybersecurity, where seemingly innocuous events can have far-reaching consequences for online safety. The affected domain, which was previously used by a popular CDN service, was quietly removed from … Read more
A Critical Azure AI Flaw Exposes Sensitive Data, Threatens Privileged Access A catastrophic vulnerability in Microsoft’s Azure AI Foundry has been patched by the company after it was found to allow attackers to escalate privileges and access sensitive data with ease. The flaw, which carries a maximum CVSS (Common Vulnerability Scoring System) score of 10.0, … Read more