CyberNews Cybersecurity researchers have uncovered a novel attack technique dubbed “ClickFix” that exploits browser caching mechanisms to bypass Windows run limits and deliver malicious payloads. This sneaky tactic has significant implications for users, as it allows attackers to evade traditional security controls and inject malware into compromised systems. The ClickFix method relies on the browser cache, … Read more
A massive data breach in Denmark has left millions of citizens vulnerable, after attackers exploited a company account to access sensitive personal information. The incident highlights the critical need for robust cybersecurity measures and emphasizes the importance of protecting sensitive data. The breach, which was disclosed by Danish authorities on October 6th, involves the unauthorized … Read more
The FBI has taken swift action against a contractor who worked with Accenture, a global consulting firm, after a critical patch failure led to a devastating data breach. The incident, attributed to the notorious hacking group ShinyHunters, exposed sensitive information belonging to several major companies and government agencies. At the center of the controversy is … Read more
A critical vulnerability in Atlassian’s software has been discovered, allowing unauthenticated attackers to read known files across eight of its products. The flaw, which affects Confluence, Jira, Bitbucket, and five other applications, could potentially allow hackers to gain access to sensitive data. Atlassian’s software is widely used by organizations for project management, collaboration, and development … Read more
The US Senate has taken a crucial step towards protecting American healthcare data from cyber threats by passing the bipartisan Health Care Cybersecurity and Resilience Act. The bill, introduced by Senators Bill Cassidy, Maggie Hassan, Jon Cornyn, and Mark Warner, aims to strengthen the sector’s defenses against increasingly sophisticated attacks. Cyberattacks on US healthcare institutions … Read more
A Critical Vulnerability in Rejetto HFS Exposes Servers to Remote Code Execution Threat actors have begun exploiting a critical vulnerability in Rejetto HTTP File Server (HFS) that allows them to bypass authentication and gain remote code execution on vulnerable servers. The flaw, tracked as CVE-2026-61500 with a CVSS score of 9.3, was discovered by AI-powered … Read more
Over 250,000 people have had their sensitive information compromised in two separate data breaches at New Jersey-based Clover Health Investments and Texas-based AngMar Management Services. The affected individuals include patients and insurance holders whose personal identifiable information (PII) and protected health information (PHI) were stolen by hackers. The breach at Clover Health Investments occurred in … Read more
A recently discovered Linux backdoor has been spotted using the Session Traversal Utilities for NAT (STUN) protocol to turn infected systems into proxies, exploiting dozens of vulnerabilities along the way. The malware, dubbed ClingSTUN, not only sets up a back-connect proxy backdoor but also contains self-propagation mechanisms that ensure its own execution during the boot … Read more
Google has temporarily shut down its Open Source Software Vulnerability Reward Program (OSS VRP) for product vulnerability submissions, citing a surge in automated reports that have overwhelmed the system. This move affects researchers who had been relying on the program to receive rewards for discovering vulnerabilities in Google’s open source projects. The pause, which was … Read more
US Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity The US Senate has just passed a landmark bipartisan bill aimed at bolstering healthcare cybersecurity, sending it to the House of Representatives for consideration. The Health Care Cybersecurity and Resilience Act is designed to help the healthcare sector fortify itself against cyber threats, which have become … Read more