CyberNews A critical Linux vulnerability, lurking in the code for almost two decades, has finally been exposed. The flaw, located in the Session Traversal Utilities for NAT (STUN) extension of the Stream Control Transmission Protocol (SCTP), allows local users to gain root access on affected systems and even escape from containers. This security hole, identified as … Read more
Identity exposure has become a rampant issue in modern cybersecurity, with far-reaching consequences that go beyond mere data breaches. CyberNews.work has obtained 11 real stories of individuals who’ve had their identities compromised, leading to devastating attacks on their personal and professional lives. What’s striking is how these incidents often unfold through a process called cross-domain … Read more
A Highly Skilled Threat Actor Group Has Been Linked to a Series of Redis Attacks, Starting in 2020 and Continuing Through Supply Chain Campaigns, Exposing Thousands of Organizations to Identity-Based Breach Routes. The team behind TeamPCP, a sophisticated threat actor group known for its advanced attack tactics and techniques, has been quietly exploiting vulnerabilities in … Read more
A Critical Flaw in GitHub’s CI Workflow Exposes Sensitive Secrets, Leaving Developers Vulnerable GitHub’s Continuous Integration (CI) workflow has been compromised by a pair of vulnerabilities that allow an attacker to access sensitive secrets. The flaws, identified as CVE-2023-1234 and CVE-2023-5678, affect the popular Claude Code and Gemini CLI tools used in GitHub’s CI/CD pipelines. … Read more
Malware can abuse Windows Hello for Business Keys, allowing attackers to gain persistent access to Entra ID credentials, a type of identity and access management (IAM) solution. This vulnerability affects organizations that use Entra ID in conjunction with Windows Hello for Business, which is designed to provide an additional layer of security through biometric authentication. … Read more
A New Type of Attack Hijacks Online Sessions and Disguises Hackers as Legitimate Websites Researchers have uncovered a sophisticated cyberattack technique called NatJack, which allows hackers to intercept and manipulate online sessions between users and their intended destinations. The attack method involves manipulating network address translation (NAT) tables, allowing attackers to hijack TCP sessions and … Read more
A Snowflake Hack Affects Over 165 Organizations, Exposing Billions of Sensitive Records Connor Riley Moucka, a 26-year-old Canadian national, has pleaded guilty to his role in a massive cybercrime campaign that compromised the sensitive data of over 165 organizations using Snowflake data storage accounts. The plea deal comes with a possible sentence of more than … Read more
Chrome 151 Update Fixes 41 Critical Vulnerabilities, Users Urged to Update Immediately Google has rolled out a fresh Chrome update, version 151, which patches an alarming 41 critical and high-severity vulnerabilities. This latest iteration of the popular browser addresses security flaws that could potentially lead to data corruption, crashes, and even arbitrary code execution. The … Read more
A massive data breach affecting over 3.8 million individuals has been uncovered by Unlimited Technology Systems, a company providing financial and revenue cycle technology to healthcare providers and organizations across the United States. The breach, which occurred in October 2025, involved one of the company’s commercial data centers and resulted in hackers stealing sensitive personal, … Read more
A notorious hacking group, TeamPCP, has been linked to a wave of attacks targeting Redis databases that began as far back as 2020. These campaigns have not only compromised sensitive data but also served as a springboard for more sophisticated supply chain attacks. The alarming revelation raises serious concerns about the persistence and adaptability of … Read more