CyberNews

Russian Espionage Group Exploits Zimbra Zero-Day to Steal Mail and 2FA Codes, Leaving Thousands Exposed A sophisticated Russian espionage group has been identified exploiting a previously unknown vulnerability in the popular email server software Zimbra, compromising thousands of users’ sensitive information. According to experts, the attackers targeted organizations worldwide, making off with email content, as … Read more

Russian Espionage Group Exploits Zimbra Zero-Day Flaw, Steals Sensitive User Data A sophisticated Russian espionage group has been using a previously unknown vulnerability in Zimbra’s email software to steal sensitive user data, including emails and two-factor authentication (2FA) codes. The revelation highlights the ongoing threat posed by state-sponsored actors to organizations worldwide. The zero-day flaw … Read more

A New Era in Cybersecurity Assurance: FedRAMP 20X Ditches Narrative-Based Controls for Continuous Evidence The Federal Risk and Authorization Management Program (FedRAMP) has been a cornerstone of US government cybersecurity compliance since its inception. However, as of July 23, 2026, the long-awaited transition to Rev5 is coming to an end. This shift marks a significant … Read more

Microsoft’s 365 services were knocked offline for thousands of users on July 23, with popular tools like Teams and SharePoint inaccessible. The outage was widespread, with Downdetector logging over 2,400 complaints within an hour – a staggering increase from its normal baseline. The issue affects not only Microsoft Teams, but also other essential tools such … Read more

A sophisticated Chinese malware campaign, codenamed “JadeProx,” has been linked to an array of high-profile attacks targeting government and healthcare organizations worldwide. The attackers have leveraged a novel exploit called TriBack Loader, which uses artificial intelligence (AI) models to rapidly identify and exploit previously unknown software vulnerabilities. Researchers at cybersecurity firms have been tracking the … Read more

A new strain of ransomware, dubbed “Chaos,” is making headlines this week after its creators found an innovative way to evade detection and maximize damage. The malware uses a sophisticated tactic involving msaRAT, a remote access tool (RAT) typically used for espionage or malicious purposes, to route command-and-control (C2) traffic through unsuspecting browsers like Chrome … Read more

A Critical Flaw in Claude Cowork Exposes Macs to Unchecked AI Agent Escapes A concerning security vulnerability has been discovered in Claude Cowork, an artificial intelligence (AI) platform designed for remote work and collaboration. The flaw allows an AI agent running within a virtual machine (VM) on a Mac to potentially escape its confinement and … Read more

A New Era in Cybersecurity Assurance: FedRAMP Rev5 Replaced by Continuous Assessment Model The Federal Risk and Authorization Management Program (FedRAMP) has been at the forefront of cybersecurity standards for federal agencies and contractors. Its evolution from Rev5 to 20X marks a significant shift towards continuous, machine-readable assurance – a departure from the traditional narrative-heavy … Read more

A widespread outage has struck Microsoft’s popular productivity suite, leaving thousands of businesses and individuals unable to access critical services. At around 11:00 a.m. ET on July 23rd, users began reporting issues with accessing Microsoft Teams, SharePoint, Excel, and other Microsoft 365 services. The outages have been severe enough to prompt Microsoft to acknowledge the … Read more

A sophisticated malware campaign, dubbed “JadeProx,” has been linked to China and targets government and healthcare organizations worldwide. This cyber threat leverages a novel exploitation technique known as TriBack Loader, which utilizes artificial intelligence (AI) models to identify vulnerabilities in software. At its core, JadeProx is a type of remote access trojan (RAT) designed to … Read more