CyberNews

Critical Ruby on Rails Vulnerability Exploited in the Wild, Putting Thousands at Risk A severe vulnerability in the popular web framework Ruby on Rails is being actively exploited by hackers, putting thousands of websites and applications at risk. The flaw, tracked as CVE-2026-66066 (CVSS score 9.5), allows attackers to execute arbitrary code on affected servers, … Read more

A growing number of organizations are falling victim to a sophisticated cyber attack campaign that exploits two vulnerabilities in PaperCut’s print management solutions, NG and MF. Threat actors have shifted from reconnaissance to hands-on-keyboard activity, compromising vulnerable systems and deploying remote access tools. PaperCut first issued warnings about an actively exploited zero-day vulnerability on August … Read more

A devastating new wave of cyberattacks has emerged, exploiting two recently patched vulnerabilities in the PaperCut print management software used by millions worldwide. The security flaws, tracked as CVE-2026-81578 and CVE-2026-82078, can be chained to bypass authentication and grant attackers remote code execution on vulnerable servers. This has led to a surge in data theft … Read more

Critical Vulnerabilities Exposed in Langflow and Rails, Leaving Thousands of Websites Open to Credential-Probing and C2 Activity A devastating combination of vulnerabilities in Langflow and Rails has left thousands of websites vulnerable to credential-probing and command-and-control (C2) activity. Attackers have been exploiting these critical flaws to gain unauthorized access to sensitive data and disrupt business … Read more

A Federal Judge Slams the Pentagon’s Actions Against AI Firm Anthropic, Ruling Them “Illegal and Baseless” In a scathing rebuke, US District Judge Rita Lin has ruled that the Pentagon acted unlawfully in labeling artificial intelligence company Anthropic as a supply chain risk earlier this year. The government had designated the firm as a threat … Read more

A UK Airport Group’s Data is Under Threat from a Notorious Extortion Group Manchester Airports Group (MAG), which operates three major airports in the UK, including Manchester and London Stansted, has fallen victim to a data breach. The incident involves sensitive information, including email addresses, phone numbers, vehicle registrations, and postcodes of approximately 8.7 million … Read more

Boston Scientific Still Reeling from Cyberattack Aftermath US medical technology giant Boston Scientific is still struggling to recover from a devastating cyberattack that struck its global operations nearly a week ago. The company’s IT systems were compromised on August 25, leading to a network outage that disrupted product manufacturing, customer order processing, and shipping. Boston … Read more

A Critical Ruby on Rails Vulnerability is Now Being Exploited by Attackers A severe vulnerability in Ruby on Rails, a popular web application framework, has been exploited by attackers. The flaw, known as KindaRails2Shell, allows an unauthenticated attacker to execute arbitrary code remotely, potentially leading to data breaches and lateral movement within a network. This … Read more

PaperCut Attacks Escalate to Active Intrusions, Threatening Thousands of Systems A disturbing trend is unfolding in the cybersecurity world as attacks exploiting vulnerabilities in PaperCut’s print management solutions escalate from reconnaissance to active intrusions. The threat actors, who were initially using two recently discovered zero-day vulnerabilities to gain access to affected systems, have now moved … Read more

A sophisticated malware campaign targeting users of Anthropic’s Claude AI platform has compromised thousands of accounts, allowing attackers to hijack login sessions and run up unauthorized charges. In an email notification sent to affected customers, Anthropic revealed that infostealer malware had infiltrated computers running Windows and macOS, stealing sensitive information such as saved passwords, browser … Read more