CyberNews A critical vulnerability in Tencent’s Sogou Input Method for Windows has been exploited by Chinese-aligned threat actors to deploy a sophisticated backdoor malware known as GrayRabbit. The security flaw, identified as CVE-2026-51990, allows attackers to execute malicious code with just one click, putting hundreds of millions of users at risk. The vulnerability is being actively … Read more
As the AI industry hurtles towards a potentially catastrophic future, its leaders are finally acknowledging the elephant in the room. In a candid warning, Dario Amodei, CEO of Anthropic, has urged his peers to slow down their breakneck development pace and give safety measures time to catch up. The stakes are high: without a slowdown, … Read more
Hackers Exploit Critical Flaw in Tencent App to Deploy Malicious Backdoor A critical vulnerability in Tencent’s Sogou Input Method for Windows has been exploited by threat actors linked to a China-aligned espionage group, allowing them to deploy the GrayRabbit backdoor on compromised systems. This security issue is a one-click remote code execution (RCE) flaw that … Read more
Cyberattackers have been exploiting a weakness in Microsoft’s cloud authentication system, using a technique known as passkey phishing to gain unauthorized access to user accounts and steal sensitive data. The attackers are targeting users of Microsoft Azure Active Directory (Azure AD), which is used by millions of businesses worldwide for identity management and access control. … Read more
Hackers have discovered a new tactic to gain unauthorized access to sensitive Microsoft cloud accounts, exploiting user trust in their passkeys. The attackers use phishing emails that mimic legitimate login prompts, tricking victims into revealing their passkeys and subsequently taking control of their cloud resources. Microsoft’s cloud services, which include Azure Active Directory (AAD) and … Read more
Cybersecurity agencies have been sounding the alarm about a growing threat landscape, and the latest development from CISA only adds to the urgency. In a significant move, the Cybersecurity and Infrastructure Security Agency has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, which includes flaws in Artifactory, ScreenConnect, and RouterOS software. … Read more
A new wave of high-severity vulnerabilities has been added to the Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog, with five fresh entries for Artifactory, ScreenConnect, and RouterOS. These flaws have been actively exploited in the wild, putting countless organizations at risk of cyber attacks. The KEV catalog is a critical resource … Read more
Critical Check Point VPN Flaws Pose Imminent Threat to Businesses A warning has been issued by the Dutch Nationaal Cyber Security Centrum (NCSC) that two critical vulnerabilities in Check Point’s Virtual Private Network (VPN) solution are about to be exploited. The flaws, tracked as CVE-2026-85102 and CVE-2026-85103, have already prompted Check Point to release patches, … Read more
Cybersecurity threat actors have taken their attacks to the next level with a sophisticated scheme that leverages artificial intelligence (AI) agents to harvest, validate, and consolidate access to Large Language Models (LLMs). This “self-expanding” inference supply chain is a worrying development that highlights the evolving nature of cyber threats. At its core, this operation involves … Read more
Critical Flaws in GitLab Platform Expose Users to Remote Attacks, Patches Released Amid Growing Probes GitLab’s software development platform has been hit with two high-severity flaws, one of which holds the highest possible severity score. The company has rushed out emergency patches for both issues, but a security firm has already spotted attackers probing the … Read more