CyberNews

Spark RAT Targets Cambodia, Exploiting OPSWAT Vulnerability to Disable Security Tools A sophisticated malware campaign has been uncovered targeting Cambodian organizations, utilizing a vulnerable driver from OPSWAT to disable security tools and gain unfettered access to compromised systems. Spark RAT, as the malware is known, exploits a previously undisclosed vulnerability in OPSWAT’s MetaAccess driver, which … Read more

Two alleged members of the notorious “TeamPCP” hacking group have been arrested in Australia, marking a significant breakthrough in the global effort to bring down this prolific cybercrime syndicate. The Australian Federal Police (AFP) announced the arrests today, revealing that two men from Western Australia, aged 21 and 23, were taken into custody for their … Read more

US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks A major blow has been dealt to state-sponsored hackers operating out of China, as the US government announced that it has disrupted a hacking platform and botnet used by these actors. The platform, operated by a company called Nanjing Xinjiuwei Network Technology, was … Read more

The US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a significant security incident after being added to the list of victims by the Qilin ransomware gang. The incident follows a pattern of increasingly brazen cyberattacks on high-profile targets, including several US federal agencies. Qilin, a Ransomware-as-a-Service operation that emerged in August 2022, … Read more

The US Government Faces a Deadline to Patch Critical Citrix Vulnerability A critical security flaw in Citrix NetScaler appliances has been identified as actively exploited by threat actors, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to order federal agencies to patch their systems by Saturday. The vulnerability, tracked as CVE-2026-8452, allows attackers to … Read more

The US Cybersecurity and Infrastructure Security Agency (CISA) has added six exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, a move that underscores the ongoing threat posed by unpatched software flaws. The newly listed bugs affect NetScaler, Linux, SQL Server, and other systems, putting organizations in various industries at risk of cyber attacks. The … Read more

GPUThor, a notorious rowhammer-based attack tool, has made headlines once again for its ability to bypass crucial security measures on high-end NVIDIA graphics processing units (GPUs). The latest exploit, dubbed “GPUThor Rowhammer,” successfully defeats Error-Correcting Code (ECC) memory protection on the NVIDIA RTX A6000, granting attackers Host Root Access – a level of control that’s … Read more

Two Tech Giants, Adobe and Nvidia, Rush to Patch Dozens of Vulnerabilities in Their Products In a bid to safeguard their customers’ sensitive data, Adobe and Nvidia have simultaneously released patches for dozens of vulnerabilities affecting their products. The patches address critical code execution flaws, as well as high-severity weaknesses that could lead to denial-of-service … Read more

A recent analysis by Palo Alto Networks’ Unit 42 team has shed light on the role of artificial intelligence (AI) in malware development. The study examined 405 malware samples tied to AI in some way, revealing a concerning trend: while AI can speed up the creation and dissemination of malware, it doesn’t necessarily make these … Read more

A High-Severity Citrix Vulnerability is Being Exploited in the Wild, with Government Agencies Impacted The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to government organizations to immediately patch a critical vulnerability in Citrix’s NetScaler appliances. The flaw, known as CVE-2026-8452, was patched by Citrix on June 30, but it appears … Read more