CyberNews

In a worrying development, cybersecurity researcher Abdelhamid Naceri has released yet another zero-day exploit targeting Microsoft’s Windows Defender antivirus software. The new exploit, dubbed “BigDiskBuster”, blocks Windows Defender updates on all supported Windows versions, leaving users vulnerable to malware attacks. Naceri, who claims to be a former Microsoft employee and has been involved in an … Read more

A Critical Vulnerability Exposed in Check Point Management Servers, Leaving Enterprises at Risk A recently discovered zero-day vulnerability in Check Point’s Security Management Server has been exploited in the wild, putting thousands of organizations at risk. The critical path traversal flaw allows unauthenticated attackers to upload arbitrary scripts and execute them with ease, making it … Read more

Shadow IT Threats Lurk in the Dark Corners of Your Network – How Wazuh Can Shine a Light on Unmanaged Assets Unbeknownst to many organizations, a significant portion of their network remains hidden from view. This “shadow IT” refers to hardware, software, and services operating outside the purview of IT and security teams, often without … Read more

A new breed of Windows malware has emerged, one that leverages artificial intelligence (AI) to make attack decisions without human intervention. ClosedQuorum, as it’s called, uses a panel of AI models to autonomously determine its next steps during post-compromise stages of an attack, effectively eliminating the need for human operators. The Go-based malware relies on … Read more

Tomorrow, a live webinar will delve into the intricacies of real-world Google Workspace breaches, shedding light on the tactics used by attackers to gain access to sensitive data. According to recent reports, these breaches often don’t rely on sophisticated exploits or stolen passwords, but rather on convincing users to grant unauthorized access through social engineering … Read more

Microsoft’s Digital Crimes Unit has led a coordinated effort with law enforcement and cybersecurity companies to disrupt the EvilTokens phishing-as-a-service (PhaaS) operation, which compromised over 12,000 Microsoft accounts across more than 10,000 organizations worldwide. The takedown is a significant blow to the threat actor, known as Storm-2992, who used AI-powered features to customize lures and … Read more

A Critical Security Management Server Vulnerability Has Been Exploited in the Wild, Warns Check Point Check Point Software has issued emergency hotfixes to address a critical vulnerability in its Security Management Server that could allow attackers to run arbitrary scripts. This path traversal flaw, tracked as CVE-2026-93616, allows unauthenticated threat actors to upload and execute … Read more

Shadow IT has become an increasingly common phenomenon in modern organizations, with employees installing unauthorized software, hardware, and services that bypass security teams’ visibility and approval. These hidden assets create significant blind spots for security controls, making it challenging to detect potential threats. According to recent estimates, a substantial number of endpoints in many organizations … Read more

A new wave of autonomous malware has emerged, threatening Windows users with sophisticated attacks that can be executed without human intervention. ClosedQuorum, a Go-based malware, uses artificial intelligence (AI) models to autonomously decide its next course of action during post-compromise stages of an attack. This marks a significant shift in the world of cybersecurity, as … Read more

FBI Hit with Massive Data Breach via Unpatched Zero-Day Vulnerability in PeopleSoft System A massive data breach affecting the US Federal Bureau of Investigation (FBI) has been claimed by the notorious extortion gang ShinyHunters, who say they exploited a previously unknown vulnerability in Oracle’s PeopleSoft system to gain unauthorized access to sensitive information. According to … Read more