CyberNews A Russian National Indicted for Infecting 80,000 Freelancers with Malware in Massive Phishing Campaign In a major crackdown on cybercrime, the US Department of Justice has indicted a 40-year-old Russian national for his role in a massive phishing campaign that infected over 80,000 freelancers with malware. Searzhudin Tamirlanovich Aktulaev, who was extradited to the United … Read more
A critical vulnerability in the Sangoma Switchvox VoIP platform is being actively exploited by hackers to deploy reverse shells, potentially allowing them to take control of affected systems. The bug, identified as CVE-2026-9586, is an unauthenticated SQL injection flaw that can lead to remote code execution. According to security researchers at Horizon3, most internet-exposed Switchvox … Read more
A Russian national has been charged with infecting over 80,000 freelancers with malware in a sophisticated phishing campaign that highlights the ongoing threat of cybercrime. Searzhudin Tamirlanovich Aktulaev, 40, was extradited to the United States after being arrested in Cyprus and is now facing federal charges for his alleged role in the scheme. According to … Read more
Microsoft’s flagship security software, Defender for Office 365, has been mistakenly flagging legitimate Google search links as malicious. The issue, which was first acknowledged by Microsoft on September 2nd, is causing users to see warning messages when trying to open blocked hyperlinks. According to a service alert seen by CyberNews.work, the problem stems from an … Read more
Dropbox users are facing a security breach that allows unauthorized access to their accounts through a flaw in Lenovo’s email verification process. The cloud storage provider has warned its users that an attacker exploited this vulnerability to register fraudulent Lenovo IDs and gain access to Dropbox accounts without needing the login password. The issue affects … Read more
Ransomware attacks on Managed Service Providers (MSPs) have become increasingly common, with 143 such incidents reported in 2025 alone. These attacks not only disrupt business operations but also put sensitive customer data at risk. To combat this threat, MSPs need a robust ransomware protection service that goes beyond mere backup and endpoint detection. A recent … Read more
Sangoma Switchvox Flaw Exposes Thousands to Remote Code Execution Attacks A critical security vulnerability in the Sangoma Switchvox VoIP platform is being actively exploited by hackers to deploy reverse shells, putting thousands of internet-exposed systems at risk. The flaw, identified as CVE-2026-9586, was discovered by security researchers at Horizon3 and reported to Sangoma back in … Read more
Cloud Storage Company Dropbox Warns Users of Unauthorised Account Access via Lenovo ID Flaw Dropbox has alerted some users that their accounts were accessed by an unauthorized party due to a vulnerability in Lenovo’s email verification process. This allowed attackers to register fake Lenovo IDs and subsequently access the associated Dropbox account without needing the … Read more
Ransomware protection for Managed Service Providers (MSPs) has become a top concern in recent years, as attacks have increased in frequency and severity. A recent report by Bleeping Computer highlights the importance of robust ransomware protection measures for MSPs, which can have far-reaching consequences if compromised. The report emphasizes that backup alone is not enough … Read more
Millions of WordPress websites are at risk of being taken over by hackers due to a serious vulnerability in a popular backup plugin. The issue, discovered by security researcher Jack Taylor, allows attackers to execute malicious code and gain control of affected sites. The All-in-One WP Migration and Backup plugin is used by more than … Read more