CyberNews Critical Roundcube Webmail Flaw Exploited in Code Injection Attacks, Thousands of Users at Risk Hackers have started exploiting a high-severity vulnerability in Roundcube Webmail, a widely used browser-based email client, to carry out code injection attacks. The flaw, patched in May but now actively exploited, allows attackers with no privileges to bypass authentication and inject … Read more
If you’re among the thousands of organizations that hold a FedRAMP certification, your attention is likely focused on the rapidly approaching deadline of December 7, 2026. This is the day when two critical rules, Vulnerability Detection and Response (VDR) and Verification and Evaluation (VER), will become mandatory for all cloud service offerings obtaining or maintaining … Read more
Critical Roundcube Vulnerability Exploited in Code Injection Attacks, Leaving Millions of Users Exposed A highly critical vulnerability in the popular webmail client Roundcube is being actively exploited by hackers, putting millions of users at risk. The Canadian Centre for Cyber Security has issued a warning that attackers are now taking advantage of the flaw, which … Read more
Yesterday, a critical vulnerability in WordPress was exploited by attackers mere hours after its public disclosure. The bug, identified as CVE-2026-87902, affects all versions of WordPress prior to 5.9.2 and allows an attacker to gain elevated privileges on a compromised site. The impact of this exploit is far-reaching, with thousands of websites potentially vulnerable to … Read more
A Critical Deadline Looms for FedRAMP-Certified Cloud Providers: Understanding the Impact of VDR and VER Rules FedRAMP-certified cloud providers have a critical deadline approaching on December 7, 2026. By this date, new rules governing vulnerability detection and response (VDR) and vulnerability exposure reporting (VER) will become mandatory for all cloud service offerings seeking or maintaining … Read more
Cyberattacks on Ukrainian websites have taken a new turn, with hackers exploiting vulnerabilities to serve fake Cloudflare clickjacking lures that lead victims into downloading a malicious program called Psychedelic Stealer. This sophisticated phishing tactic has compromised thousands of users worldwide, highlighting the growing threat of cybercrime in the region. The malware, Psychedelic Stealer, is designed … Read more
As AI-powered threat detection continues to evolve, a growing concern has emerged in the cybersecurity landscape: identity exposure. A recent report from researchers reveals that AI algorithms can now map an organization’s internal infrastructure and identify potential attack paths based on exposed identities – essentially creating a treasure trove of vulnerabilities for malicious actors. The … Read more
Logistics Firms Hit by Sophisticated Corp MDM Spyware, Stealing New SMS and Redirecting Calls A devastating new wave of corporate Mobile Device Management (MDM) spyware has been targeting logistics firms worldwide, compromising sensitive data and disrupting operations. The highly sophisticated malware, dubbed “Echelon,” has infiltrated the networks of several major transportation companies, exposing their employees’ … Read more
Ukraine’s Cybersecurity Crisis Deepens as Hacked Sites Distribute Malicious Cloudflare Lures A new wave of cyberattacks has hit Ukraine, with hacked websites serving up fake security updates that trick users into installing malware. The malicious campaign, which exploits a well-known vulnerability in the cloud-based security platform Cloudflare, has already compromised several high-profile Ukrainian sites. What’s … Read more
A sophisticated attack campaign, dubbed TeamFiltration, has compromised seven Microsoft 365 accounts, highlighting a significant vulnerability in the way these platforms handle default passwords. The attackers’ modus operandi involves exploiting weak passwords that are often left unchanged by users, allowing them to breach otherwise secure systems and access sensitive data. The TeamFiltration campaign is an … Read more