CyberNews

**Multiple Chrome VPN Extensions Caught Redirecting Traffic Through Proxies, Putting Users’ Data at Risk** A disturbing discovery has been made in the world of cybersecurity, as multiple popular Chrome VPN extensions have been caught routing users’ internet traffic through unauthorized proxies. This revelation highlights a critical vulnerability that could compromise sensitive information and leave users … Read more

A New Zero-Day Exploit in Microsoft Defender Allows System Privileges Grab In a shocking revelation, a security researcher known as Nightmare Eclipse has unleashed a new zero-day exploit in Microsoft Defender called ShieldBreak. This vulnerability is particularly concerning because it can be used to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and … Read more

Signal’s Latest Move: Automatic Key Verification Takes Aim at Man-in-the-Middle Attacks In a significant step to strengthen its users’ online security, messaging app Signal has introduced Automatic Key Verification – a new feature designed to detect and prevent man-in-the-middle (MitM) attacks. This innovative system uses Cloudflare and Trail of Bits as trusted third-party auditors to … Read more

Cybersecurity experts have sounded an alarm after discovering that malicious LiteLLM releases linked to a Trivy hack may have exposed over 2,100 organizations worldwide. The threat actors exploited vulnerabilities in the popular security scanning tool, using it as a springboard for privilege escalation and domain hopping attacks. The Trivy hack allowed attackers to create customized … Read more

A critical vulnerability in VMware vCenter has been exploited by attackers, giving them persistent remote access to affected systems. VMware’s virtualization platform is used by over 500,000 organizations worldwide, including some of the largest enterprises and government agencies. This means that a significant number of companies are potentially vulnerable to this attack. The vulnerability, tracked … Read more

Adobe Patches Three Critical Flaws in ColdFusion and Campaign Classic, Leaving Many Vulnerable Adobe has released a slew of patches for its ColdFusion and Adobe Campaign Classic platforms, addressing three critical vulnerabilities that could allow attackers to gain complete control over affected systems. With CVSS scores ranging from 9.8 to the maximum possible score of … Read more

A new Microsoft Defender zero-day exploit has been disclosed by a security researcher, allowing attackers to gain SYSTEM privileges on fully patched Windows systems. The exploit, named “ShieldBreak,” was released just days after Microsoft’s August 2026 Patch Tuesday security updates. The vulnerability is particularly concerning because it bypasses another previously patched flaw in Microsoft Defender … Read more

Signal has rolled out a new security feature designed to thwart man-in-the-middle (MITM) attacks on its encrypted chat platform. Automatic Key Verification is part of a “key transparency” system that uses trusted third-party auditors to verify the integrity of Signal conversations, giving users a new way to ensure their chats haven’t been intercepted. This new … Read more

A massive cybersecurity threat has been uncovered, with over 2,100 organizations potentially compromised due to a series of malicious LiteLLM (Lightweight Language Model) releases tied to a vulnerability in the Trivy container security tool. This complex attack chain highlights the interconnected nature of modern IT systems and the importance of robust security measures. The issue … Read more

VMware vCenter Vulnerability Exposes Organizations to Persistent Remote Attacks A critical vulnerability in VMware’s vCenter Server product has been exploited by attackers to gain persistent remote access to affected systems, potentially allowing them to move laterally within an organization and create a long-term threat. The exploit affects thousands of organizations worldwide that rely on vCenter … Read more