CyberNews A highly skilled attacker has been quietly compromising both Salesforce and ServiceNow portals since 2025, exploiting vulnerabilities in these popular cloud platforms to gain unauthorized access to sensitive customer data. The brazen cyber campaign, which has flown under the radar for over a year, raises serious concerns about the security posture of companies that rely … Read more
A sophisticated malware campaign has targeted RubyGems, a popular package repository for Ruby developers, resulting in the compromise of 16 packages. The attack, which leverages a technique called typosquatting, has put browser credentials and cryptocurrency wallets at risk. Typosquatted packages are malicious versions of legitimate software that have been created to deceive users into installing … Read more
A massive data breach affecting over 1.2 million individuals has come to light, with consumer lender Heights Finance Holdings Co. notifying those whose personal and financial information was stolen by hackers. The incident, which occurred in early May, involved a third-party cloud-based platform used for customer data storage that was accessed by the attackers. The … Read more
Microsoft has finally begun removing a long-abused tool from its latest Windows 11 builds, a move that’s expected to significantly boost the operating system’s security posture. The Windows Management Instrumentation Command-line (WMIC) tool, which has been a favorite among cybercriminals for its ability to interact with Windows systems using text commands, will no longer be … Read more
A Search Outage Hits Microsoft 365, Leaving Some Users Stranded Microsoft has confirmed an outage affecting search functionality within its Microsoft 365 suite of apps. The issue has left some users unable to search for content within SharePoint Online, OneDrive, Outlook on the web, and Outlook desktop. While the company hasn’t specified which regions are … Read more
A critical vulnerability in a widely used browser plugin has been flagged by US authorities as actively exploited, potentially giving hackers the keys to remote code execution and unleashing devastating attacks on unsuspecting users. The flaw, designated as Ray, resides within an innocuous-looking library that is embedded across multiple applications, including those related to financial … Read more
A Vulnerability in SafePal Hardware Wallets Exposed Personal Data of Thousands SafePal, a Singapore-based company that produces hardware wallets for cryptocurrency users, has disclosed a critical security flaw that exposed sensitive information about nearly 40,000 customers. The vulnerability, discovered by an anonymous researcher and reported to SafePal through their bug bounty program, allowed attackers to … Read more
A notorious cybercrime group, BlackFile, has been wreaking havoc on financial companies and other organizations across multiple industries. According to researchers at Google Threat Intelligence Group (GTIG), this threat actor has been active since the start of 2026, targeting victims with ease and extorting them for millions of dollars. BlackFile’s modus operandi is a perfect … Read more
Threat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers on vulnerable systems. The bug, tracked as CVE-2026-65400, is an authentication issue in Screen Sharing that allows remote attackers to log in without valid credentials. The vulnerability has been observed being exploited by threat actors roughly a week after … Read more
Apple has just released a batch of security updates for its macOS, iOS, and iPadOS operating systems, addressing dozens of vulnerabilities that could allow hackers to crash browsers, steal sensitive data, or even take control of entire systems. The patches fix flaws in WebKit, the engine behind Safari, as well as other critical components like … Read more