CyberNews

A Critical GitLab Flaw Has Been Exploited Just Days After Disclosure, Leaving Users Exposed to Serious Risks In a shocking turn of events, threat actors have begun exploiting a critical-severity vulnerability in GitLab just two days after it was publicly disclosed. The flaw, tracked as CVE-2026-19478 and boasting a CVSS score of 9.4, allows an … Read more

Microsoft Investigates Potential Gaming Issues Caused by August Windows Updates A growing number of gamers are experiencing problems with certain games on their Windows 11 systems, leading Microsoft to investigate a potential issue tied to its recent updates. The affected titles include ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals, among others. Users report … Read more

A Critical Flaw in Elementor Pro Puts Millions of WordPress Sites at Risk of Remote Code Execution A newly discovered vulnerability in the popular Elementor Pro plugin for WordPress has left millions of websites vulnerable to remote code execution attacks. The flaw, which affects all versions of Elementor Pro up to 3.16.1, allows unauthenticated attackers … Read more

Oracle’s August 2026 Critical Security Patch Update has brought with it a massive 943 patches aimed at addressing over 1,000 unique vulnerabilities across its product portfolio. This latest round of security fixes marks the third monthly update from Oracle this year and underscores the need for organizations to stay on top of their patching schedules. … Read more

Cybersecurity Agency Sounds Alarm on Exploited Vulnerities in Microsoft, VMware, and Apple Products A stark warning has been issued by the US Cybersecurity and Infrastructure Security Agency (CISA) regarding four critical vulnerabilities that have been exploited in the wild. The agency is urging all affected organizations to patch these weaknesses as quickly as possible, emphasizing … Read more

Cl0p Ransomware Group Targets Over 40 Organizations with Sophisticated Windchill Campaign A sophisticated ransomware campaign launched by the Cl0p gang has compromised over 40 organizations worldwide, exploiting a critical vulnerability in PTC’s product lifecycle management (PLM) platforms Windchill and FlexPLM. The attack not only enables arbitrary code execution but also provides full data theft capability … Read more

The United States has taken a significant step in combating cybercrime by charging 17 members of an Iran-based hacking group with conducting massive attacks on universities, private companies, and government agencies worldwide. The Mabna Institute, founded in 2013, was allegedly established to facilitate the theft of non-Iranian scientific resources, including academic data and intellectual property. … Read more

A Critical Flaw in Elementor Pro Exposes Websites to Code Injection Attacks A severe vulnerability has been discovered in the popular website builder plugin Elementor Pro, which could allow unauthenticated attackers to upload and execute malicious PHP code on affected websites. This critical flaw, disclosed by security researchers earlier this week, affects all versions of … Read more

The US has taken a significant step in combating state-sponsored cyber attacks by charging 17 Iranian hackers affiliated with the Mabna Institute. This group, allegedly founded by Iran’s Islamic Revolutionary Guard Corps (IRGC), has been stealing sensitive information from universities, research organizations, and private companies around the world. According to a superseding indictment, the Mabna … Read more

A UK-Based Startup Secures $22 Million to Tackle Fragmented Enterprise Data with AI-Powered Solution In a significant development that highlights the growing importance of artificial intelligence (AI) in cybersecurity, Prevalent AI, a London-based startup, has secured $22 million in growth funding from Integrity Growth Partners. The company’s data fabric platform uses AI to turn fragmented … Read more