CyberNews A New Zero-Day Exploit in Microsoft Defender Allows System Privileges Grab In a shocking revelation, a security researcher known as Nightmare Eclipse has unleashed a new zero-day exploit in Microsoft Defender called ShieldBreak. This vulnerability is particularly concerning because it can be used to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and … Read more
Signal’s Latest Move: Automatic Key Verification Takes Aim at Man-in-the-Middle Attacks In a significant step to strengthen its users’ online security, messaging app Signal has introduced Automatic Key Verification – a new feature designed to detect and prevent man-in-the-middle (MitM) attacks. This innovative system uses Cloudflare and Trail of Bits as trusted third-party auditors to … Read more
Cybersecurity experts have sounded an alarm after discovering that malicious LiteLLM releases linked to a Trivy hack may have exposed over 2,100 organizations worldwide. The threat actors exploited vulnerabilities in the popular security scanning tool, using it as a springboard for privilege escalation and domain hopping attacks. The Trivy hack allowed attackers to create customized … Read more
A critical vulnerability in VMware vCenter has been exploited by attackers, giving them persistent remote access to affected systems. VMware’s virtualization platform is used by over 500,000 organizations worldwide, including some of the largest enterprises and government agencies. This means that a significant number of companies are potentially vulnerable to this attack. The vulnerability, tracked … Read more
Adobe Patches Three Critical Flaws in ColdFusion and Campaign Classic, Leaving Many Vulnerable Adobe has released a slew of patches for its ColdFusion and Adobe Campaign Classic platforms, addressing three critical vulnerabilities that could allow attackers to gain complete control over affected systems. With CVSS scores ranging from 9.8 to the maximum possible score of … Read more
A new Microsoft Defender zero-day exploit has been disclosed by a security researcher, allowing attackers to gain SYSTEM privileges on fully patched Windows systems. The exploit, named “ShieldBreak,” was released just days after Microsoft’s August 2026 Patch Tuesday security updates. The vulnerability is particularly concerning because it bypasses another previously patched flaw in Microsoft Defender … Read more
Signal has rolled out a new security feature designed to thwart man-in-the-middle (MITM) attacks on its encrypted chat platform. Automatic Key Verification is part of a “key transparency” system that uses trusted third-party auditors to verify the integrity of Signal conversations, giving users a new way to ensure their chats haven’t been intercepted. This new … Read more
A massive cybersecurity threat has been uncovered, with over 2,100 organizations potentially compromised due to a series of malicious LiteLLM (Lightweight Language Model) releases tied to a vulnerability in the Trivy container security tool. This complex attack chain highlights the interconnected nature of modern IT systems and the importance of robust security measures. The issue … Read more
VMware vCenter Vulnerability Exposes Organizations to Persistent Remote Attacks A critical vulnerability in VMware’s vCenter Server product has been exploited by attackers to gain persistent remote access to affected systems, potentially allowing them to move laterally within an organization and create a long-term threat. The exploit affects thousands of organizations worldwide that rely on vCenter … Read more
Adobe’s latest security patch release has brought to an end a string of high-severity vulnerabilities in its ColdFusion and Campaign Classic products. Three critical flaws, each carrying a maximum CVSS (Common Vulnerability Scoring System) score of 10.0, have been patched by the software giant after it became aware of the issues. The affected products are … Read more