CyberNews

Cybersecurity Investment Platform Balance Theory Scores $19 Million in Funding to Help Enterprises Optimize Security Spending Balance Theory, a cybersecurity investment management startup, has secured a significant $19 million in Series A funding to further develop its platform for helping chief information security officers (CISOs) evaluate and manage their organizations’ security spending. This influx of … Read more

A Critical Vulnerability Exposes Rails Apps to Remote Code Execution Attacks Security researchers have discovered a critical vulnerability in the Active Storage framework used by popular web application framework Ruby on Rails. The flaw, known as CVE-2026-66066, allows an unauthenticated attacker to read arbitrary files from a Rails application and potentially escalate to remote code … Read more

A newly discovered vulnerability in popular ZIP file parsing tools has left security researchers scrambling to adapt. zipdump.py, a tool used for analyzing and extracting metadata from ZIP files, has been found to be vulnerable to encoding issues that can lead to incorrect display of filenames. The issue affects users who work with ZIP files … Read more

Cybersecurity investment management startup Balance Theory has secured $19 million in Series A funding to expand its platform for helping Chief Information Security Officers (CISOs) evaluate and manage security spending. The company’s platform is designed to bring together cybersecurity investment planning, market intelligence, and execution into a single system, providing a holistic view of an … Read more

A Critical Flaw in Rails’ Active Storage Framework Exposes Servers to Remote Code Execution A severe vulnerability has been discovered in the Active Storage framework, a crucial component of the popular Ruby web application framework Rails. The flaw, dubbed CVE-2026-66066, allows an unauthenticated attacker to read arbitrary files from a vulnerable Rails application and potentially … Read more

A Critical Update for Zip File Analysis Tools: Metadata Encoding Issue Explored A recent issue has been brought to light regarding zipdump.py, a popular tool used for analyzing ZIP files. The problem centers around how metadata is encoded in these files, which can lead to incorrect interpretations if not handled properly. This article will delve … Read more

**Cyber Attackers Target AI Solution Providers in Sneaky Phishing Campaigns** A new wave of phishing attacks has been spotted, targeting companies that provide artificial intelligence (AI) solutions to businesses and individuals. The attackers are using a clever tactic to trick victims into handing over their sensitive payment information. This development is particularly concerning, given the … Read more

A Critical Vulnerability in Ruby on Rails Puts Web Applications at Risk In a potentially disastrous security breach, Ruby on Rails has issued patches for a critical vulnerability that could allow unauthenticated attackers to execute malicious code on web servers. The issue affects applications built using the popular framework’s Active Storage feature and exposes sensitive … Read more

A Devastating Hack Hits Adform, Exposing Customers to Crypto Wallet Heists In a shocking revelation that’s sending shivers down the spines of cybersecurity professionals and online business owners alike, it has come to light that hackers have successfully compromised the Adform platform. This popular advertising technology company provides services to over 4,000 customers worldwide, including … Read more

A new wave of phishing campaigns is targeting artificial intelligence (AI) solutions providers, including popular chatbots like ChatGPT. Threat actors are using sophisticated tactics to trick users into revealing sensitive payment information, taking advantage of the growing reliance on AI services in both personal and professional settings. The phishing emails, which have been spotted by … Read more