CyberNews A critical vulnerability in a popular Chinese-language input method editor has been exploited by a state-sponsored threat actor, giving attackers the ability to deploy a backdoor with just one click. The flaw, tracked as CVE-2026-51990, affects Sogou Input Method, developed by Tencent and used by hundreds of millions of Windows users worldwide. The vulnerability is … Read more
Windows PC Users Left Without Sound After Microsoft’s Latest Updates A glitch in Microsoft’s latest batch of security patches has left some Windows 11 users without sound on their computers. Specifically, USB audio devices may fail to work after installing the September updates (KB5124008 and KB5124012). This issue affects only devices running Windows 11 version … Read more
Revolut Discloses Data Breach Exposing Financial Info and Passports, Affecting Thousands of Customers Worldwide A significant data breach has hit fintech company Revolut, exposing sensitive financial information and passport details for thousands of customers. The breach, which occurred when a threat actor impersonated a government agency, highlights the ongoing threat posed by sophisticated phishing attacks. … Read more
Windows Server Users Left Reeling as September Updates Cause Remote Desktop Failures A growing number of administrators have reported a critical issue with this month’s security updates from Microsoft, which are causing widespread failures in Remote Desktop Services (RDS) on Windows Server systems. The problem affects not only enterprise environments but also individual users who … Read more
A malicious Twitch browser extension has been found to be stealing OAuth tokens from nearly 31,000 users, potentially exposing them to identity theft and other cyber attacks. The affected extension, which has been downloaded over a million times, is designed to enhance the user experience on the popular live streaming platform by providing additional features … Read more
A Critical Vulnerability in GitLab Exposes Sensitive Data – What You Need to Know The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that hackers are now exploiting a maximum-severity vulnerability in GitLab’s DevSecOps platform. The security flaw, tracked as CVE-2026-85706, allows attackers to read sensitive information from vulnerable servers without authentication. … Read more
A Critical Vulnerability in GitLab’s DevSecOps Platform is Being Exploited in Attacks, CISA Warns The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that hackers are taking advantage of a maximum-severity vulnerability in GitLab’s popular DevSecOps platform. The security flaw, tracked as CVE-2026-85706, allows attackers to read sensitive information from vulnerable servers … Read more
**Critical Vulnerabilities Exploit in Widely Used Security Software** A new wave of attacks is sweeping through the internet, targeting a critical vulnerability in a popular security software package used by millions of individuals and organizations worldwide. The exploit, which allows malicious actors to gain unauthorized access to systems and sensitive data, has been identified as … Read more
A sophisticated phishing campaign is targeting organizations worldwide, using a clever trick to evade detection and deliver malware to unsuspecting victims. The campaign, which was first spotted by SANS Internet Storm Center (ISC) analysts on Monday, September 14th, leverages compromised email accounts to send highly convincing phishing messages that appear to come from trusted sources. … Read more
As AI development accelerates at breakneck speed, warnings from industry leaders are sounding louder than ever. Dario Amodei, CEO of Anthropic, has called for a slowdown in AI development to give safety measures time to catch up. Without such a pause, he warns that within six to 12 months AI could be capable of leading … Read more