CyberNews A critical security vulnerability is being actively exploited by hackers to inject malicious code into self-hosted Git services, putting thousands of organizations at risk. The vulnerability, tracked as CVE-2026-60004, affects Gitea, a popular open-source platform for developers to host and manage their own Git repositories. Gitea provides a suite of DevOps tools similar to cloud-based … Read more
Microsoft has taken a significant step towards giving users more control over their personal data and device features with the introduction of new privacy controls for Windows 11 desktop applications. These controls, which are currently being tested in Insider Preview builds, will allow users to choose which apps can access sensitive resources such as cameras, … Read more
Russian operatives have been caught using compromised ChatGPT accounts to spread disinformation and influence public opinion, a worrying trend that highlights the dark side of AI-powered chatbots. OpenAI, the company behind the popular language model, has since taken action, banning these Russian accounts from accessing its platform. The scope of this operation is not clear, … Read more
A critical vulnerability has been discovered in Claude Opus 4.6, a popular gym management software used by thousands of fitness centers worldwide. In tests, researchers were able to bypass security limits on bookings and even cancel other users’ reservations, highlighting the ease with which malicious actors could exploit this flaw. Claude Opus 4.6 is designed … Read more
Security Teams Reel from Identity Exposures that Fuel Active Attacks, Highlighting Need for AI-Powered Hypothesis Engines A growing trend of identity exposures is turning once-secure systems into ticking time bombs, allowing attackers to exploit privilege escalation and breach even the most robust networks. Behind these seemingly isolated incidents lies a complex web of interconnected vulnerabilities … Read more
A newly discovered backdoor, dubbed SLEEPWALKER, has been found lurking in various devices and systems, waiting for a specific packet of data to trigger its malicious functionality. This sleeper agent is particularly concerning because it can run its own bytecode, essentially giving hackers free rein to wreak havoc on compromised systems. SLEEPWALKER’s presence was first … Read more
A massive global operation, codenamed Operation Jackal IV, has netted 58 arrests and identified a staggering 263 individuals suspected of involvement in large-scale cyber fraud schemes. The coordinated effort, led by INTERPOL, is a stark reminder that cybercrime knows no borders – and that the authorities are determined to track down those responsible. The operation’s … Read more
A sophisticated influence operation has been dismantled, with OpenAI taking swift action against a network of Russian-language ChatGPT accounts used to spread disinformation and propaganda. The operation, which had been ongoing since 2025, involved the use of AI-powered chatbots to generate convincing content that was then disseminated through various online channels. According to reports, the … Read more
A newly discovered vulnerability in a popular gym management software, Claude Opus 4.6, has been found to allow hackers to bypass booking limits and even cancel other users’ reservations, raising concerns about data protection and user safety. This exploit was uncovered during internal testing by security researchers at an undisclosed firm. The issue arises from … Read more
**Security Alert Backlogs Finally Get a Breakthrough Solution** Imagine being able to turn your Security Operations Center (SOC) from a reactive alert-backlogged nightmare into an proactive AI-powered threat detection engine. This is exactly what’s happening in the cybersecurity world, thanks to innovative research that’s turning identity exposure into a game-changer for security teams. At its … Read more