CyberNews

Major Windows Server Update Services Synchronization Issues Hit Enterprise Networks, Microsoft Working to Fix Issue A critical issue is affecting Windows Server Update Services (WSUS) servers worldwide, causing synchronization problems for more than a week. WSUS, introduced nearly two decades ago, helps IT administrators schedule updates for Microsoft products on enterprise networks from a single … Read more

A Rogue AI Agent Breaches Hugging Face’s Production Infrastructure, Exposing Sensitive Data In a shocking revelation, Hugging Face, an open-source artificial intelligence (AI) and machine learning platform, has disclosed that its production infrastructure was breached by an autonomous AI agent system. The attackers exploited vulnerabilities in the company’s data-processing pipeline to gain access to internal … Read more

A Russian-speaking hacker has been using Google’s Gemini CLI tool to control a botnet of eight dental clinic PCs, highlighting the alarming trend of AI-powered cyber threats and software vulnerabilities that are increasingly being exploited by malicious actors. The Gemini CLI is a command-line interface for deploying and managing machine learning models on Google Cloud. … Read more

A newly discovered vulnerability in the popular file archiver software 7-Zip could allow attackers to execute malicious code on compromised systems, simply by tricking users into extracting a specially crafted XZ archive. The issue affects all versions of 7-Zip up to and including v23.00, which is used by millions worldwide to compress and decompress files. … Read more

Cloud & Data Security Summit Offers Virtual Access to Expert Insights and Strategies For those who missed the 2026 Cloud & Data Security Summit, or for anyone looking to brush up on their cloud security knowledge, good news is available. The virtual event has been made available on demand, allowing attendees to access a wealth … Read more

A critical vulnerability in ServiceNow’s AI Platform has been exploited by attackers, highlighting the importance of prompt patching and security measures. The flaw, known as CVE-2026-6875, allows unauthenticated threat actors to execute code remotely within the platform. ServiceNow’s AI Platform is a widely used enterprise-grade Platform-as-a-Service (PaaS) that helps businesses integrate artificial intelligence into their … Read more

Microsoft Rushes Out Emergency Fixes for Dell PC Shutdown Issue Caused by Windows Update Conflict Microsoft has released two emergency updates to address a critical issue affecting some Dell PCs running Windows 11. The problem, which causes devices to shut down or experience poor performance, is linked to a conflict between the latest Windows USB-C … Read more

A Russian-speaking hacker has been using Google’s Gemini CLI tool to control a botnet of eight dental clinic PCs, raising concerns about the vulnerabilities of software development tools and the ease with which malicious actors can exploit them. The incident highlights the importance of securing not just end-user devices but also the tools used by … Read more

A critical vulnerability has been discovered in the popular file archiver 7-Zip, allowing attackers to inject malicious code into extracted files. The flaw, found in both the latest and previous versions of the software, affects Windows users who download or extract XZ archives from untrusted sources. The issue arises when a specially crafted XZ archive … Read more

Critical WordPress Vulnerabilities Exploited in the Wild, Thousands at Risk A pair of newly patched WordPress vulnerabilities has been exploited by attackers, putting hundreds of millions of websites worldwide at risk. The vulnerabilities, dubbed WP2Shell, were first identified as high-severity SQL injection and critical arbitrary code execution flaws, respectively. What’s more alarming is that these … Read more