CyberNews A global cyberattack campaign has been unleashed by a threat actor utilizing hundreds of AI agents to target vulnerable PaperCut NG/MF servers. The operation, which began on August 31, exploited two critical security flaws (CVE-2026-81578 and CVE-2026-82078) affecting the software, compromising at least 440 instances linked to 395 distinct organizations across 48 countries. The AI … Read more
A major vulnerability in Google Play’s Early Access program has been exploited by malicious actors, leading to the proliferation of thousands of deceptive Android apps. These apps, designed to deceive users into divulging sensitive information or installing malware, have made their way onto millions of devices worldwide, putting countless individuals at risk. The issue stems … Read more
A massive global cyberattack has been unfolding over the past week, targeting PaperCut NG/MF servers in at least 395 organizations across 48 countries. The attack, which began on August 31, was carried out by a threat actor likely of Russian origin, using hundreds of AI agents to develop and launch a sophisticated exploitation campaign. The … Read more
A new threat has emerged in the world of Android banking app security, as a group called Gigabud has developed a technique to evade malware detection by creating work profiles on compromised devices. This clever tactic allows malicious actors to bypass security checks and continue to siphon sensitive information from unsuspecting users. Gigabud’s method relies … Read more
A Highly Sophisticated Attack Exploits PaperCut’s Vulnerabilities, Impacting Over 440 Instances Worldwide In a staggering display of cyber resilience, hackers have leveraged hundreds of AI agents to compromise over 440 instances of PaperCut, a popular print management system. The attack showcases the evolving tactics employed by modern attackers, who are increasingly using artificial intelligence (AI) … Read more
A pair of critical vulnerabilities in widely used VPN certificates has been disclosed by Check Point, leaving thousands of organizations and individuals vulnerable to unauthenticated remote code execution (RCE) attacks. The severity of these flaws is underscored by their 9.8 rating on the Common Vulnerability Scoring System (CVSS), making them among the most critical issues … Read more
Google Play’s Early Access Feature Exploited by Malicious Actors, Thousands of Deceptive Apps Pushed onto Users A disturbing trend has emerged in the world of Android app development, where malicious actors have been exploiting Google Play’s Early Access feature to push thousands of deceptive apps onto unsuspecting users. These apps, masquerading as legitimate software, are … Read more
Cybersecurity researchers have uncovered a sophisticated exploit kit dubbed “BlueMoon” that has been used by multiple cyber-espionage groups to target Windows and Chrome users. The BlueMoon kit takes advantage of zero-day vulnerabilities in Chromium-based browsers, including Google Chrome, and Windows operating systems, making it a highly effective tool for attackers. The BlueMoon kit is a … Read more
Cybersecurity authorities have set a September 12 deadline for federal agencies and contractors to patch critical vulnerabilities in Cisco, Citrix, and Fortinet products. The move comes after the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that these flaws are being exploited by attackers, highlighting the need for swift action to prevent further breaches. The … Read more
Gigabud’s Android Work Profiles Expose Users to Banking App Malware Checks A disturbing trend has emerged in the world of mobile security, where a company called Gigabud is creating custom Android work profiles that can evade malware detection by banking apps. This revelation poses significant risks for users who rely on these apps for financial … Read more