CyberNews **Critical Vulnerability Exposed: CoSnitch Attack Tricks Copilot into Mapping Out Architecture** A sophisticated threat actor can trick a Microsoft Copilot instance into revealing its own security weaknesses, paving the way for a novel prompt injection attack. This is according to new research published by Varonis Threat Labs, which discovered a “meta-hacking” technique that manipulates the … Read more
A Critical GitLab Vulnerability Puts Self-Managed Users in a Tight Spot GitLab’s security team has identified a critical flaw in its software development and DevOps platform, affecting all self-managed versions of its Community Edition (CE) and Enterprise Edition (EE). The bug, designated as CVE-2026-19478, is a code-injection vulnerability that can be exploited by an attacker … Read more
Comcast’s New Xfinity Shield Platform Turns WiFi into Motion Detectors without Cameras or Sensors In a bid to revolutionize home protection, Comcast has integrated WiFi-based motion detection into its new Xfinity Shield platform. This feature, known as WiFi Motion, utilizes the radio signals between Xfinity gateways and stationary devices on the network to detect movement … Read more
A critical security vulnerability in GitLab’s software development and DevOps platform has been discovered, allowing attackers to manipulate or delete publicly accessible projects and user data with ease. The bug, known as CVE-2026-19478, is a code-injection flaw that can be exploited without any authentication or user interaction required. This means that even if an organization … Read more
Comcast’s New Feature Uses WiFi Signals to Detect Home Motion, Raising Concerns About Privacy and Accuracy In a bid to enhance home security, Comcast has announced a new feature that uses WiFi signals to detect motion within homes. Dubbed “WiFi Motion,” this technology is part of the company’s Xfinity Shield platform, which combines cybersecurity, physical … Read more
A group of hackers calling themselves “Ransom Busters” has claimed responsibility for infiltrating servers used by ransomware operators, and is now demanding payment from those same victims in exchange for not revealing their sensitive information. The move has left many experts scratching their heads, wondering how this could happen and what it means for the … Read more
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets, Leaving Thousands Vulnerable A severe vulnerability in the popular open-source machine learning platform MLflow has been exploited by attackers to steal cloud credentials and sensitive secrets from thousands of organizations. The flaw, which enables cross-domain privilege escalation, allows hackers to bypass security controls and … Read more
**Critical Flaw in Microsoft Copilot Personal Exposes Data from Connected Apps** A newly discovered vulnerability in Microsoft’s Copilot Personal has been found to allow a single click to exfiltrate sensitive data from connected applications, putting millions of users at risk. The issue lies in the way Copilot Personal handles user permissions and access control, allowing … Read more
Behind Closed Doors: Cybersecurity’s Darkest Secrets Exposed in Groundbreaking Docuseries In a bold move, 11 high-profile Chief Information Security Officers (CISOs) from top organizations have opened up about their most intimate and often painful experiences with breaches, burnout, and personal struggles. The “Declassified” docuseries, launched by Red Mirror Studios, is changing the narrative around cybersecurity … Read more
Cybersecurity Threat Actors Create Custom Web Shell to Steal Data from PTC Windchill Servers A sophisticated cyber threat has been uncovered, with hackers leveraging a custom-built web shell to steal sensitive data from PTC Windchill servers. The web shell, linked to the notorious Clop ransomware gang, is specifically designed to exploit vulnerabilities in these servers … Read more