CyberNews

Agentic AI Challenges Progress in Confidential Computing

by

As Confidential Computing Hits Mainstream, Agentic AI Presents New Security Challenges The adoption of confidential computing has been gaining momentum in recent years, thanks to significant advancements in technology. However, a new threat model is emerging as artificial intelligence (AI) becomes increasingly prevalent in enterprises. Agentic AI, which refers to AI agents that can think … Read more

Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets

by

Russian State-Sponsored Hackers Exploit Zimbra Zero-Day in Sophisticated Phishing Campaign A highly sophisticated phishing campaign has been uncovered, targeting Western governments and enterprises through a vulnerability in the popular email management system, Zimbra Collaboration Suite (ZCS). The attack, attributed to a Russian state-sponsored threat group dubbed “Laundry Bear,” has compromised networks of US and Ukrainian … Read more

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

by

A New Era of Stealthy Malware: msaRAT Uses Browsers to Route C2 Traffic Cybersecurity researchers have uncovered a sophisticated new backdoor dubbed msaRAT that is being used by the Chaos ransomware gang to evade detection and maintain control over compromised systems. What’s particularly noteworthy about this malware is its ability to route command-and-control (C2) communication … Read more

New RefluXFS Linux flaw lets attackers gain root privileges

by

A new Linux vulnerability has been discovered that allows attackers to gain root privileges on systems with an XFS filesystem. Dubbed RefluXFS by the Qualys Threat Research Unit (TRU), this security flaw affects millions of Linux users worldwide and poses a significant threat to system integrity. The vulnerability, tracked as CVE-2026-64600, has been present in … Read more

Australian energy provider Origin says data breach exposes client data

by

Australian Energy Provider Origin Confirms Data Breach Exposing Client Information to Threat Actors A significant data breach has been confirmed by Australian energy provider Origin Energy, exposing the personally identifiable information (PII) of an unknown number of its 4.8 million customers. The company is currently investigating the scope of the breach and will notify affected … Read more

New Dolphin X malware uses AI to rank high-value targets

by

A New Malware Threat Emerges with AI-Powered Profiling Feature Cybercriminals have been exploiting artificial intelligence (AI) in various ways, from launching spam campaigns to conducting autonomous cyberattacks. The latest development in this trend is a new malware called Dolphin X, which uses an AI-powered profiling feature to identify high-value targets among infected users. This remote … Read more

Microsoft working to fix Exchange Online mailbox quarantine issue

by

A major issue is unfolding for Microsoft’s Exchange Online users, with thousands of mailboxes mistakenly quarantined since Sunday. The problem, which has been ongoing for four days, has left users unable to receive and send emails, access their calendars, or even send emails to those whose mailboxes are incorrectly marked as quarantined. At the heart … Read more

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

by

The Chaos ransomware gang has unleashed a new backdoor dubbed msaRAT that leverages popular web browsers like Chrome and Edge to route command-and-control (C2) traffic. This sophisticated malware, written in Rust, employs the Chrome DevTools Protocol (CDP) to control a headless browser session and establish a connection to the attacker’s server without making any direct … Read more