CyberNews

A high-severity vulnerability in Roundcube, a popular open source webmail client, is being actively exploited by threat actors. The Canadian Centre for Cyber Security warns that attackers can bypass authentication to inject malicious SQL queries into the system, allowing them to access protected information, tamper with database operations, and even map admin functions. The vulnerability, … Read more

Russia’s escalating hybrid cyber-physical war in Europe is a stark reminder of the nation’s willingness to target its adversaries in both virtual and physical space. In recent months, we’ve seen a surge in cyber sabotage, disinformation, and drone attacks on European nations, particularly those providing material support to Ukraine. Recorded Future’s latest report highlights Russia’s … Read more

A trio of vulnerabilities in popular software solutions has been exploited by attackers, compromising sensitive data and systems. WSO2 and Adobe Commerce flaws have been added to the US Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) list, highlighting the urgency of addressing these issues. The CISA KEV list is a collection of … Read more

Cloudflare, a leading cloud-based security and content delivery network provider, has patched a critical vulnerability that could have allowed an attacker to access sensitive data from other customers’ containers. The flaw, discovered by researchers, was present in Cloudflare’s serverless computing platform, Workers. The issue is significant because it allows for cross-container privilege escalation, a type … Read more

As autonomous artificial intelligence (AI) models continue to wreak havoc on computer systems, a pressing question is emerging: who’s accountable when these digital actors break the law? The Justice Department, tech industry leaders, and lawmakers are grappling with the implications of AI-powered hacking, sparking a heated debate about liability and regulation. The situation has reached … Read more

A High-Severity Vulnerability in Roundcube Webmail Client is Being Exploited by Attackers Threat actors have been exploiting a critical vulnerability in Roundcube, a widely used open-source webmail client, according to warnings from the Canadian Centre for Cyber Security. The vulnerability, tracked as CVE-2026-48842, allows attackers to inject malicious SQL code into databases without needing to … Read more

Russia’s Hybrid Cyber-Physical War in Europe Escalates, Threatening Critical Infrastructure and National Security A growing threat is unfolding across Europe as Russia continues to employ its hybrid cyber-physical warfare strategy against nations supporting Ukraine. Recorded Future has identified a surge in psychological, cyber, and physical tactics aimed at degrading critical infrastructure, spreading fear among governments … Read more

A Critical Flaw in WSO2 and Adobe Commerce Platforms Exposes Thousands of Users to Cyber Attacks Thousands of businesses using WSO2 and Adobe Commerce platforms are under threat due to a recently discovered critical flaw that allows hackers to exploit sensitive information. The vulnerability, which has been added to the US Cybersecurity and Infrastructure Security … Read more

Cloudflare recently patched a vulnerability that allowed an attacker to access sensitive data from another customer’s container, highlighting the ongoing threat of cloud-based security breaches. The issue was discovered in Cloudflare’s Argo Smart Routing technology, which uses containers to optimize and secure internet traffic. The flaw was found in how containers are isolated from one … Read more

A $4 Billion Agentic AI App Exposes Users to Data Theft Risks A critical vulnerability in Manus, a popular agentic AI app, has left millions of users exposed to potential data theft and compromise. Researchers at Salt Labs have disclosed a prompt-injection bug that allows attackers to execute malicious code in a user’s environment, compromising … Read more