CyberNews Google’s PageBreak AI Agent Unleashes a Torrent of Flaws in Its Web Apps, Highlighting the Power and Pitfalls of AI-Powered Security In a remarkable display of its own vulnerabilities, Google’s internal AI agent, PageBreak, has identified over 500 cross-site scripting (XSS) flaws in the company’s web applications. This startling discovery serves as a stark reminder … Read more
Critical Healthcare Systems Remain Vulnerable to Quantum-Ready Attacks Healthcare organizations are failing to prepare for the dawn of the post-quantum cryptography era, leaving millions of sensitive patient records and medical imaging data potentially vulnerable to devastating attacks. A recent study by Forescout Technologies analyzed 2.5 million devices across over 50 healthcare delivery organizations and uncovered … Read more
Threat actors have been evolving their tactics to stay one step ahead of security measures. A recent wave of attacks has seen malicious payloads being hidden in plain sight, making it increasingly difficult for victims and security professionals alike to detect early warning signs. ClickFix, a social engineering technique that exploits human trust in software … Read more
Hackers have been exploiting a severe vulnerability in two popular WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to gain unauthorized access to thousands of websites. The attacks, which were identified by security researchers at Patchstack, involve installing backdoors and creating hidden administrator accounts that can’t be detected or removed. The vulnerability affects … Read more
A new wave of sophisticated cyberattacks is emerging, as threat actors refine their tactics to evade detection and gain a foothold in unsuspecting networks. The ClickFix technique, which exploits human problem-solving tendencies and trust in software, has become increasingly prevalent in recent years. Now, attackers are taking it to the next level by hiding malicious … Read more
Critical File-Access Flaw Hits Atlassian Products, Urgent Patching Advised Atlassian has issued a critical security warning for its self-hosted Data Center products, including Confluence, Jira, and Bitbucket. A vulnerability tracked as CVE-2026-21589 allows an unauthenticated attacker to access specific files within the affected application’s web root directory, posing a significant threat to users with self-hosted … Read more
Security Researchers Score Big at Pwn2Own Ireland with Record-Breaking Zero-Day Exploits Yesterday marked the first day of the highly anticipated Pwn2Own Ireland competition, where top security researchers gather to demonstrate their skills in finding and exploiting vulnerabilities in popular software. In a stunning display of expertise, one team managed to hack the Samsung Galaxy S26 … Read more
New Wave of Linux Backdoors Evades Detection in Korea and Taiwan, Exposing Users to Critical Risks A disturbing trend has emerged in cybersecurity threats, with hackers exploiting vulnerabilities in Linux systems to install backdoors that masquerade as legitimate email security tools. The affected regions are primarily Korea and Taiwan, where the attackers have successfully evaded … Read more
Cyber attackers have devised a sneaky way to steal login credentials and multi-factor authentication (MFA) codes from unsuspecting victims, using fake portals for popular AI chatbots like ChatGPT, Gemini, and Claude. These impostor websites are designed to mimic the real deal, complete with identical branding and convincing interfaces, all in an attempt to trick users … Read more
A UK-based online fashion retailer, ASOS, has confirmed a data breach after hackers sent unauthorized push notifications through its mobile app, claiming to have stolen customer data from the company’s Snowflake environment. The breach is the latest in a string of high-profile attacks on major brands, highlighting the ongoing threat posed by sophisticated cybercriminals. ASOS, … Read more