CyberNews Microsoft Scrambles to Patch ShieldBreak Zero-Day Vulnerability in Windows Defender A serious security vulnerability has been discovered in Microsoft’s Defender antivirus software, allowing attackers with limited permissions to gain SYSTEM privileges on fully patched Windows systems. The flaw, dubbed “ShieldBreak,” was disclosed by a security researcher known as “Nightmare Eclipse” after Microsoft released its August … Read more
A massive data breach has struck the French tax authority, exposing sensitive information belonging to nearly 700,000 individuals. The attack, which was only recently disclosed by the authorities, raises serious concerns about the security of government databases and the potential consequences for those affected. According to a statement from the French Finance Ministry, an attacker … Read more
Two global tech giants, General Electric (GE) and Philips, have joined oil giant Shell in investigating claims that their systems were breached by the notorious Clop ransomware gang. The alleged data theft incident has sparked concerns about the security of enterprise software platforms widely used across various industries. According to reports, the Clop hacking group … Read more
A China-Nexus Actor Exploits VMware vCenter Flaw, Deploying Babuk-Derived Ransomware Cybersecurity researchers have uncovered a sophisticated cyberattack that leverages a previously unknown vulnerability in VMware’s vCenter management software to deploy a custom-built ransomware variant derived from the infamous Babuk strain. The attack is suspected to be linked to China-based threat actors, who have been known … Read more
A new and highly sophisticated botnet, dubbed “Evooo1Bot,” has been discovered compromising Linux-based edge devices worldwide. This botnet exploits known vulnerabilities in various software applications, turning compromised machines into SOCKS5 proxies that can be controlled remotely by attackers. The implications are far-reaching, with potentially millions of devices at risk. At the heart of this issue … Read more
A massive data theft campaign has targeted several Fortune 500 companies, exposing millions of sensitive records that could be used in sophisticated social engineering attacks. The threat actor, known as “TheHatman,” claims to have stolen over 5 million records from the Azure tenants of prominent brands like McDonald’s Corporation, Tata Consultancy Services (TCS), Vodafone, and … Read more
A critical vulnerability in SAP Commerce Cloud has been exploited just three days after its public disclosure, highlighting the urgent need for organizations to prioritize patching and monitoring their systems. The vulnerability, tracked as CVE-2026-58231, is a serious issue that allows attackers to execute arbitrary code and compromise internal components. It was publicly disclosed on … Read more
A recent macOS vulnerability is being exploited in real-world attacks, allowing hackers to gain root access and deploy cryptominers on vulnerable systems. The flaw, tracked as CVE-2026-65400, affects Screen Sharing, a built-in feature that allows users to remotely control another Mac’s screen. The bug was patched by Apple just over a week ago, but threat … Read more
Microsoft Rushes to Patch Zero-Day Flaw in Defender Amid Ongoing Dispute with Security Researcher A serious security hole has been discovered in Microsoft’s Defender antivirus software, allowing hackers to escalate privileges and gain control of Windows systems. The flaw, dubbed “ShieldBreak,” was publicly disclosed by a security researcher known as Nightmare Eclipse on August 14, … Read more
A sophisticated threat actor, known by the moniker “TheHatman”, has been selling millions of records allegedly stolen directly from the Azure tenants of several Fortune 500 organizations. The compromised data includes sensitive information about employees, such as names, email addresses, phone numbers, and job titles. According to Hudson Rock, a company that specializes in tracking … Read more