CyberNews A Highly Automated Credit Card Heist: AI-Powered Attackers Steal 600,000 Records and Infect Hundreds of Sites In a disturbing demonstration of the evolving cyber threat landscape, a financially motivated attacker is using open-source artificial intelligence (AI) agent frameworks to launch a massive campaign against online retailers. Since at least July, this sophisticated operation has resulted … Read more
A Critical WordPress Flaw is Being Exploited by Hackers, Leaving Thousands of Sites Vulnerable In a concerning development, hackers have begun exploiting a recently patched critical vulnerability in WordPress, allowing them to write files to disk that execute shell commands when accessed. The flaw, identified as CVE-2026-87902, was discovered by security researcher Robert Ressl and … Read more
A New Wave of Android Malware Targets European and Canadian Users with Sophisticated Phishing Overlays A highly advanced Android banking malware platform has been discovered, targeting users in Europe, Canada, and several Middle Eastern countries. Dubbed RemControl, this malware-as-a-service (MaaS) uses a combination of artificial intelligence (AI), malvertising campaigns, and phishing overlays to steal sensitive … Read more
Malicious Use of Placeholder Domain Tricks Windows Users into Running PowerShell Commands A concerning trend has emerged in the cybersecurity landscape, where a commonly used placeholder domain is being exploited by attackers to distribute malware. The “third-party.com” domain, often used as an arbitrary external website or service in developer documentation and code examples, has been … Read more
Network Management Systems Under Siege as Attackers Exploit Critical Vulnerabilities A recent report from Eclypsium’s InfraTrust Pulse has revealed that network management systems are increasingly being targeted by attackers, with devastating consequences. The monthly report tracks security advisories affecting various infrastructure components, and the latest edition paints a worrying picture of the vulnerability landscape. Between … Read more
Check Point Warns of Widespread Exploitation of Security Gateway VPN Flaw Cybersecurity company Check Point has confirmed that hackers are actively exploiting a pair of pre-authentication vulnerabilities in its Security Gateway product, which enables secure remote access through virtual private networks (VPNs). The vulnerability, tracked as CVE-2026-85102, affects the certificate-handling functionality of the VPN and … Read more
A New Android Malware Threat Erupts in Europe and Canada, Targeting Banking Credentials with Sophisticated Tactics Cybersecurity researchers have uncovered a new Android malware-as-a-service (MaaS) platform called RemControl, which is wreaking havoc on users in Europe and Canada. This highly sophisticated threat exploits vulnerabilities in the TVTap IPTV application to deliver phishing overlays designed to … Read more
A Popular Placeholder Domain Now Spreads Malware via Fake Cloudflare Page A disturbing trend has emerged in the world of cybersecurity, where a commonly used placeholder domain is being exploited by attackers to spread malware. The “third-party.com” domain, often employed as a generic example hostname in developer documentation and code examples, has been hijacked to … Read more
Cybersecurity researchers have uncovered a sophisticated attack vector, where malicious Terraform providers are being used to deliver Go malware through HashiCorp’s registry. The attackers exploit a trusted infrastructure, making it increasingly challenging for organizations to detect and respond to these threats. The affected parties include users of HashiCorp’s Terraform cloud-agnostic infrastructure as code platform. Terraform … Read more
Cybersecurity company Check Point has confirmed that hackers are actively exploiting two vulnerabilities in its Security Gateway product, allowing attackers to execute code remotely and gain unauthorized access. The affected flaws, tracked as CVE-2026-85102 and CVE-2026-93616, impact the VPN certificate-handling functionality and Management web service, respectively. The Dutch Nationaal Cyber Security Centrum (NCSC) had alerted … Read more