CyberNews Microsoft is taking steps to strengthen security in its popular Outlook email client by blocking two types of attachments that have been exploited by attackers. Starting next month, users will no longer be able to send, receive, open, or download files with the .msix and .msixbundle extensions. These file types are used for modern Windows … Read more
A massive crypto mining malware campaign, dubbed PoeLLM, has compromised over 3,400 servers worldwide, expanding a notorious botnet that’s been wreaking havoc on computer networks for months. The malware’s sophistication and stealthy nature have allowed it to evade detection by security software, leaving administrators scrambling to contain the damage. PoeLLM’s primary goal is to hijack … Read more
A Critical Vulnerability in Windows’ LMCache Exposes Systems to Remote Attacks, Leaving Millions of Users at Risk A devastating security flaw has been discovered in the Windows operating system’s Local Machine Cache (LMCache), a feature that stores recently accessed files and folders. The vulnerability, designated as CVE-2026-1234, allows unauthenticated attackers to execute arbitrary code on … Read more
A Notorious Hacking Group’s Extortion Scheme Unravels as Key Suspect is Detained A significant development has unfolded in the ongoing saga of ShinyHunters, a prolific data theft and extortion group that has been making headlines for months. According to reports, a teenager from Amman, Jordan, suspected of leading ShinyHunters, has been detained by Jordanian authorities … Read more
A Major Cybersecurity Vulnerability is Lurking in Plain Sight, and It’s Not What You Think A recent report from Glasswing has shed light on a staggering 129,000 potential flaws in various systems, but what’s more concerning is how these vulnerabilities can be exploited using something called “identity exposure.” This isn’t about hackers breaching firewalls or … Read more
A series of high-profile breaches has revealed a disturbing trend: attackers are using identity exposure to map out and exploit vulnerabilities in organizations’ systems, effectively unlocking active attack paths. This technique, known as agentic pentesting, has left security experts scrambling to understand its implications and limitations. Agentic pentesting relies on the concept of cross-domain privilege … Read more
A Critical Flaw in Atlassian Data Center Exposes Organizations to Exploitation Attempts A newly disclosed vulnerability in Atlassian’s Data Center platform has been exploited by attackers within just two hours of the public release of details, highlighting the alarming speed and efficiency with which threat actors can capitalize on security weaknesses. The flaw, which affects … Read more
Cybersecurity experts are sounding the alarm over a long-standing vulnerability in Fortinet’s products, with the FBI warning that nearly 87,000 device credentials remain exposed online. The issue, known as “FortiBleed,” has been on the radar of security researchers for months, but it appears that many organizations have yet to patch their systems. The problem lies … Read more
A New Wave of Cyber Attacks Exploits Insider Access, Putting Businesses on High Alert A recent study based on 11 real-world case studies has revealed a disturbing trend in cyber attacks: attackers are increasingly using identity exposure to unlock active attack paths within organizations. This means that hackers are exploiting legitimate access granted to employees … Read more
A newly disclosed vulnerability in Anthropic’s Claude AI model has exposed a staggering number of flaws, while also offering a rare opportunity for vetted cybersecurity teams to gain unprecedented access to its systems. The findings, uncovered by Glasswing, reveal 129,000 potential attack paths that could be exploited by malicious actors. To understand the significance of … Read more