CyberNews

Iranian hackers have unleashed a new cyber attack tool, dubbed Cavern, targeting Israeli organizations with unprecedented precision and stealth. This sophisticated Command and Control (C2) framework allows its operators to execute complex attacks, exploiting previously unknown vulnerabilities in software applications. The Cavern C2 framework has been linked to Iranian state-sponsored hacking groups, which have been … Read more

Armored Likho APT Targets Government and Electric Power Entities with Sophisticated Malware A recent investigation has uncovered a highly skilled advanced persistent threat (APT) actor, dubbed Armored Likho, which has been targeting government and electric power organizations in multiple countries. According to Kaspersky, the group’s operations span Russia, Brazil, and Kazakhstan, and its arsenal includes … Read more

Businesses are finally getting smart about cybersecurity risks. Gone are the days of simplistic risk assessment scores that fail to account for real-world consequences. Today’s organizations need a more nuanced approach that links security threats to their financial and operational realities. At its core, this shift towards business-aligned risk management is all about connecting the … Read more

A Critical Adobe ColdFusion Flaw is Being Exploited by Attackers, Urgent Action Required A maximum-severity vulnerability in Adobe’s ColdFusion platform has been actively exploited by attackers just hours after being publicly disclosed. The flaw, tracked as CVE-2026-48282, affects multiple versions of the platform and allows malicious actors to gain remote code execution on unpatched systems … Read more

Software Creation Speeds Up, But Security Lags Behind A revolution is underway in software development. Generative artificial intelligence and Vibe Coding are making it possible for developers to create applications at an unprecedented pace – almost as fast as they think them up. However, this accelerated creation process has left a gaping hole in security: … Read more

Threat actors are already probing a critical flaw in Gitea, an open-source platform for managing Git repositories, just 13 days after its disclosure. The vulnerability, identified as CVE-2026-20896, affects Docker containers and allows attackers to escalate privileges on compromised systems. Gitea is used by thousands of organizations worldwide to host and manage their software development … Read more

A critical vulnerability in Adobe ColdFusion, a popular web application development platform, is being actively exploited by attackers just two days after Adobe released patches to address the issue. The vulnerability, tracked as CVE-2026-48282, affects multiple versions of ColdFusion and allows hackers to gain remote code execution on unpatched systems without requiring any user interaction. … Read more

As Software Creation Approaches the Speed of Thought, Security Lags Behind The latest innovation in software development has revolutionized the way applications are created. Generative artificial intelligence (AI) and Vibe Coding have made it possible for anyone, anywhere to build functional solutions at an unprecedented pace. However, this rapid progress has raised a pressing concern: … Read more

CyberNews.work Exclusive: China-Nexus Hackers Utilize Fake Tax Filing Utility to Deploy DcRAT Malware A sophisticated hacking operation, suspected to be linked to Chinese actors, has been uncovered using a fake Indian tax filing utility as a vector to deploy the highly potent DcRAT malware. The malicious software, which can evade detection by traditional security systems … Read more

As AI-powered threat detection and mitigation solutions become increasingly prevalent, organizations are facing a daunting challenge: evaluating the effectiveness of these advanced security platforms. A recent report highlights six key capabilities that set leaders apart from mere “bolt-on” AI solutions, but what does this mean for the average company struggling to stay ahead of evolving … Read more