CyberNews A Sophisticated Hacker Group Combines Espionage with Crypto Fraud In a brazen display of cybercrime capabilities, the Jewelbug hacker group has been uncovered conducting espionage operations against governments and militaries while simultaneously engaging in large-scale cryptocurrency fraud. The dual-pronged approach not only highlights the group’s advanced technical skills but also raises concerns about the potential … Read more
WordPress has released an emergency patch to fix a high-severity vulnerability that can allow attackers with Author-level user permissions or higher to execute arbitrary code remotely. The issue, tracked as CVE-2026-65640, affects only WordPress installations that use Imagick and Ghostscript, and requires an attacker to have file upload rights. The vulnerability stems from the way … Read more
A Critical VMware Flaw is Being Actively Exploited for Remote Access, With 361 Systems Compromised Across 47 Countries A critical vulnerability in VMware vCenter Syslog Server has been spotted being exploited by attackers to gain remote access and persistence on compromised systems. The flaw, identified as CVE-2026-59310, was patched by Broadcom just last month, but … Read more
A Flood of AI ‘Watermark Removers’ Hits the Web, But Most Can’t Prove They Work In a bizarre turn of events, a market for tools that claim to remove AI-generated watermarks has emerged in just days, following Anthropic’s decision to embed invisible marks in text produced by its Claude model. The rush to offer “watermark … Read more
A Zero-Day Vulnerability in Windows User Profile Service Exposed by Security Researcher, Patched by Microsoft In a recent revelation that highlights the ongoing cat-and-mouse game between security researchers and software developers, a Windows zero-day vulnerability known as “LegacyHive” has been discovered and subsequently patched by Microsoft. The flaw, which allows attackers to gain administrator privileges … Read more
**Malicious Hacker Group Exposes Government Webmail Accounts While Conducting Large-Scale Crypto Fraud** A sophisticated hacking group has been carrying out a parallel campaign of espionage and cryptocurrency theft, compromising government webmail accounts in multiple countries while simultaneously operating fake crypto exchange sites. The Jewelbug hacker collective, also known as Earth Alux and REF7707, has targeted … Read more
Critical Adobe Commerce Flaw Exploited Immediately After Disclosure, Warns Sansec A highly critical security vulnerability in Adobe Commerce has been targeted by hackers mere hours after its public disclosure, according to webstore security firm Sansec. The bug, tracked as CVE-2026-71362 with a CVSS score of 9.1, allows unauthenticated attackers to elevate their privileges and take … Read more
Adobe Commerce Bug Targeted Immediately After Disclosure, Webstore Security Firm Warns A critical-severity vulnerability in Adobe Commerce has been exploited by hackers just hours after it was publicly disclosed, according to webstore security firm Sansec. The flaw, tracked as CVE-2026-71362 with a CVSS score of 9.1, allows unauthenticated attackers to elevate their privileges and take … Read more
Cybersecurity Mergers and Acquisitions Soar in July with 21 Deals Announced The cybersecurity industry has seen a flurry of activity in recent months, with mergers and acquisitions (M&A) deals making headlines left and right. In July alone, a staggering 21 deals were announced, further solidifying the trend of consolidation in the sector. At the forefront … Read more
Cybersecurity Frenzy Continues as 21 Deals Are Announced in July 2026 The cybersecurity landscape has seen a flurry of activity with twenty-one merger and acquisition (M&A) deals announced in July 2026, bringing the total number of transactions this year to over 420. This trend is not surprising given the increasing demand for robust security solutions … Read more