CyberNews A Tech Contractor’s Elaborate Scheme Unravels: Insider Attack Exposes Dangers of Data Access and Extortion In a brazen insider attack, Cameron Nicholas Curry, a 27-year-old data analyst contractor for Brightly Software, was sentenced to two years in prison after stealing sensitive corporate data and extorting the company for $7,540.92. The case highlights the risks companies … Read more
A Presidential Memo’s Dubious Future in Cyber Warfare The recent signing of a presidential memorandum by Donald Trump has sparked intense debate among cybersecurity experts. The memo authorizes private sector companies to participate in federal law enforcement hacking operations against transnational criminal organizations, but its implications are far from clear-cut. For some, the move represents … Read more
Apple’s Threat Notification System Sounds Alarm on Mercenary Spyware Attacks In a bid to safeguard its users from highly targeted and sophisticated cyber threats, Apple has sent out new “Threat Notification” alerts in multiple countries. The alerts, which have been popping up on iPhones worldwide, warn users that they may be the target of a … Read more
Nightmare Eclipse Strikes Again with Windows Zero-Day Exploit ‘ShieldBreak’ Cybersecurity researcher Nightmare Eclipse has dropped another zero-day exploit targeting Microsoft products, just in time for this month’s Patch Tuesday. The new proof-of-concept (PoC) exploit, dubbed ShieldBreak, allows any user to gain System privileges on affected systems. The exploit targets a vulnerability in Microsoft Defender, specifically … Read more
A critical vulnerability in VMware vCenter has been exploited by threat actors, with over 360 victim IP addresses identified across 47 countries. The bug, tracked as CVE-2026-59310 (CVSS score of 9.8), is a directory traversal issue in the Syslog server that leads to remote code execution. This means a malicious actor can execute arbitrary code … Read more
A critical vulnerability in VMware’s vCenter software has been exploited by a single threat actor on a global scale, just days after public disclosure. The flaw, known as CVE-2026–59310, allows an attacker with network access to remotely execute arbitrary code within a virtual environment, putting thousands of organizations at risk. The attack, which was discovered … Read more
A recent Akira ransomware attack has highlighted a concerning tactic used by hackers to disable endpoint detection and response (EDR) solutions, allowing them to steal sensitive data without even attempting to encrypt it. The attackers exploited an exposed SonicWall VPN device without multi-factor authentication (MFA) to gain initial access to the compromised system. Within just … Read more
Ukraine Cracks Down on Widespread Call Center Scams, Seizing Millions in Cash and Assets In a major crackdown on cybercrime, Ukrainian authorities have shut down 94 fraudulent call centers across the country that had been swindling people out of their hard-earned money through various investment scams. The operation, which involved multiple law enforcement agencies, resulted … Read more
A New Zero-Day Exploit Hits Windows: ShieldBreak Targets Microsoft Defender Cybersecurity researcher Nightmare Eclipse has released another zero-day exploit targeting Microsoft products, this time with a proof-of-concept (PoC) code dubbed “ShieldBreak”. This latest vulnerability affects Microsoft Defender and allows any user to gain System privileges on affected systems. The exploit was published just in time … Read more
Critical VMware vCenter Vulnerability Exploited by Attackers, Widespread Impact Reported A critical vulnerability in VMware’s vCenter product has been exploited by attackers, with over 360 victim IP addresses identified across 47 countries. The bug, tracked as CVE-2026-59310, allows malicious actors to execute arbitrary code on affected systems, highlighting the need for swift action to mitigate … Read more