CyberNews Microsoft has rolled out patches for 18 critical vulnerabilities affecting its Azure cloud portfolio and Copilot-branded AI products. These flaws, which include elevation of privilege and information disclosure issues, were discovered by both internal Microsoft researchers and external security experts. The majority of the vulnerabilities, 14 in total, are classified as elevation of privilege (EoP) … Read more
A massive data breach at Japanese software company Helpfeel’s Gyazo image-sharing service has compromised sensitive information for approximately 23.6 million users, highlighting the importance of robust cybersecurity measures in today’s digital landscape. Gyazo is a widely used cross-platform tool that allows users to capture screenshots, GIFs, or short screen recordings and instantly generate shareable links. … Read more
Check Point’s Management Systems Left Vulnerable to Root Privilege Attacks A critical vulnerability in Check Point’s management systems has been discovered, allowing hackers to execute code with root privileges. This means that attackers can gain complete control over affected systems, potentially leading to widespread damage and data breaches. The flaw, tracked as CVE-2026-91843, affects Check … Read more
A sophisticated phishing campaign has been uncovered, targeting software developers with a malicious npm package called PhantomRaven. What’s particularly concerning is that the attackers likely used a Large Language Model (LLM) to craft their attack, making it an unprecedented example of AI-facilitated cybercrime. PhantomRaven is designed to steal sensitive information from npm accounts, including access … Read more
A highly sophisticated malware attack has been unfolding on the npm package manager, exploiting 13 seemingly innocuous packages to spread a malicious code known as WeaselBiscuit Stealer. The attacker’s ultimate goal is to harvest sensitive data stored in Chrome browser extensions installed by unsuspecting users. WeaselBiscuit Stealer is a form of malware that targets Chrome … Read more
Spanish Organization Hit by AI-Driven Cyberattack, Personal Data Compromised A Spanish organization has fallen victim to a sophisticated cyberattack orchestrated by an artificial intelligence (AI) system, with the attacker exploiting vulnerabilities in corporate data stores and modifying personal records. The breach, reported by Spain’s Data Protection Agency (AEPD), marks a worrying trend in which AI-driven … Read more
Microsoft has finally patched a known issue that was causing Excel 2016 users to experience frustrating copy-and-paste problems after installing the recent security update KB5002914. This bug, which resulted in silent failures without any error messages or beeps, had been plaguing users on Microsoft’s support forums and Reddit for some time. The issue appears to … Read more
Cybersecurity firm Check Point has just released critical security updates to address a serious vulnerability that could allow hackers to execute code with root privileges on management systems. The issue, tracked as CVE-2026-91843, affects various Check Point products, including Security Management Server instances and the company’s Log Server. The problem lies in a stack-based buffer … Read more
A New Android Malware Threat Lurks in Plain Sight, Using ADB to Maintain Persistence Android users are facing a growing concern as a new malware strain, dubbed “RatHat,” has been discovered exploiting a vulnerability in the Android Debug Bridge (ADB) protocol. This allows the malicious code to maintain access to compromised devices even after it’s … Read more
A sophisticated phishing campaign is underway, leveraging a cunning tactic that exploits vulnerabilities in popular JavaScript libraries. Researchers have uncovered evidence suggesting that an individual claiming to be a bug bounty hunter used Large Language Models (LLMs) to craft a malicious npm package called PhantomRaven, designed to steal sensitive information from unsuspecting developers. PhantomRaven, masquerading … Read more