CyberNews

North Korean Hackers Exploit Windows Zero-Day Vulnerability to Target Defense Firms In a brazen attack, North Korea’s Lazarus threat group has been exploiting a previously unknown vulnerability in Microsoft Windows to infiltrate defense-sector companies across Europe and India. The hackers have been using the flaw, known as CVE-2026-68820, as part of their long-running Operation Dream … Read more

Windows Plug and Play Vulnerabilities Allow SYSTEM Access via Fake USB Devices A new wave of attacks has emerged, leveraging the Windows Plug and Play feature to compromise system security. Researchers Alejandro Hernando and Borja Martínez have revealed a family of “Plug and Pwn” attacks that exploit how Windows automatically identifies and installs software from … Read more

As enterprises continue to struggle with cybersecurity threats, a new trend has emerged that’s catching many off guard. It appears that defenses are being compromised from within, but not in the way you might think. Instead of traditional insider threats, we’re seeing a more insidious issue – identity exposure. This vulnerability is exposing active attack … Read more

Recent research has uncovered a significant vulnerability in the way AI models interact with each other’s reasoning processes. Specifically, a flaw in the Google API used by several top AI companies, including OpenAI and Anthropic, allows weaker AI models to decode the internal workings of stronger models. The issue arises from a feature called “cross-domain … Read more

A recent investigation has uncovered a shocking number of Chrome VPN extensions that are secretly routing user traffic through proxies, potentially exposing sensitive data and compromising online security. The affected extensions, totaling 737, have been installed by millions of users worldwide, making this a significant threat to internet safety. These VPN extensions, designed to protect … Read more

The FBI has issued a public warning that hackers are targeting social media and online accounts to steal sexually explicit images or videos, often with the intention of blackmailing victims or selling the content on dark web marketplaces. This disturbing trend affects not only adults but also children, with cybercriminals using stolen personal information to … Read more

Lazarus Hackers Unleash Sophisticated Attack on Defense Sector Using Zero-Day Vulnerity North Korean threat group Lazarus has been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense firms in Europe and India as part of its long-standing Operation Dream Job campaign. The hackers have used the flaw, which was patched by Microsoft earlier this month, … Read more

Cybersecurity teams are facing a new challenge as threat actors exploit identity exposure to bypass enterprise defenses, not just at the edge but also deep within internal networks. In a growing trend, hackers are using exposed identities and cross-domain privilege escalation to create active attack paths that can remain hidden even after initial breach points … Read more

A Critical Flaw in AI API Security Exposes Weaker Models’ Secrets A recent discovery has highlighted a significant vulnerability in the way some artificial intelligence (AI) models interact with each other. Researchers have found that weaker AI models can decode the reasoning behind stronger models’ decisions, potentially exposing sensitive information and undermining trust in AI … Read more

**Multiple Chrome VPN Extensions Caught Redirecting Traffic Through Proxies, Putting Users’ Data at Risk** A disturbing discovery has been made in the world of cybersecurity, as multiple popular Chrome VPN extensions have been caught routing users’ internet traffic through unauthorized proxies. This revelation highlights a critical vulnerability that could compromise sensitive information and leave users … Read more