CyberNews A Critical Vulnerability Exposed in Check Point Management Servers, Leaving Enterprises at Risk A recently discovered zero-day vulnerability in Check Point’s Security Management Server has been exploited in the wild, putting thousands of organizations at risk. The critical path traversal flaw allows unauthenticated attackers to upload arbitrary scripts and execute them with ease, making it … Read more
Shadow IT Threats Lurk in the Dark Corners of Your Network – How Wazuh Can Shine a Light on Unmanaged Assets Unbeknownst to many organizations, a significant portion of their network remains hidden from view. This “shadow IT” refers to hardware, software, and services operating outside the purview of IT and security teams, often without … Read more
A new breed of Windows malware has emerged, one that leverages artificial intelligence (AI) to make attack decisions without human intervention. ClosedQuorum, as it’s called, uses a panel of AI models to autonomously determine its next steps during post-compromise stages of an attack, effectively eliminating the need for human operators. The Go-based malware relies on … Read more
Tomorrow, a live webinar will delve into the intricacies of real-world Google Workspace breaches, shedding light on the tactics used by attackers to gain access to sensitive data. According to recent reports, these breaches often don’t rely on sophisticated exploits or stolen passwords, but rather on convincing users to grant unauthorized access through social engineering … Read more
Microsoft’s Digital Crimes Unit has led a coordinated effort with law enforcement and cybersecurity companies to disrupt the EvilTokens phishing-as-a-service (PhaaS) operation, which compromised over 12,000 Microsoft accounts across more than 10,000 organizations worldwide. The takedown is a significant blow to the threat actor, known as Storm-2992, who used AI-powered features to customize lures and … Read more
A Critical Security Management Server Vulnerability Has Been Exploited in the Wild, Warns Check Point Check Point Software has issued emergency hotfixes to address a critical vulnerability in its Security Management Server that could allow attackers to run arbitrary scripts. This path traversal flaw, tracked as CVE-2026-93616, allows unauthenticated threat actors to upload and execute … Read more
Shadow IT has become an increasingly common phenomenon in modern organizations, with employees installing unauthorized software, hardware, and services that bypass security teams’ visibility and approval. These hidden assets create significant blind spots for security controls, making it challenging to detect potential threats. According to recent estimates, a substantial number of endpoints in many organizations … Read more
A new wave of autonomous malware has emerged, threatening Windows users with sophisticated attacks that can be executed without human intervention. ClosedQuorum, a Go-based malware, uses artificial intelligence (AI) models to autonomously decide its next course of action during post-compromise stages of an attack. This marks a significant shift in the world of cybersecurity, as … Read more
FBI Hit with Massive Data Breach via Unpatched Zero-Day Vulnerability in PeopleSoft System A massive data breach affecting the US Federal Bureau of Investigation (FBI) has been claimed by the notorious extortion gang ShinyHunters, who say they exploited a previously unknown vulnerability in Oracle’s PeopleSoft system to gain unauthorized access to sensitive information. According to … Read more
Chinese hackers have been exploiting vulnerabilities in WordPress and ZyXEL devices to steal sensitive government data on a massive scale. The attackers have breached at least 49 organizations in 29 countries, stealing over 18,500 records from backend databases. This brazen campaign highlights the importance of patching known security issues before they’re exploited by hackers. The … Read more