CyberNews A new attack vector has emerged, allowing hackers to compromise Windows 11 systems with a single USB drive. Researchers have discovered a vulnerability in the operating system’s auto-install feature for unsigned drivers, which can be exploited to gain complete control over a targeted machine. This flaw affects all versions of Windows 11 and poses a … Read more
Cisco has issued a warning about two high-severity vulnerabilities affecting ClamAV, an open-source antivirus engine widely used to scan files for malware. The flaws allow unauthenticated attackers to crash the ClamAV scanning process in denial-of-service (DoS) attacks, and proof-of-concept exploit code is already publicly available. The security issues were discovered in the ZIP archive parser … Read more
A devastating cyberattack on a Polish power plant has left industry experts reeling, as hackers exploited a private cellular network to gain control of critical systems and shut down a turbine. The attack, which occurred in late July 2026, raises serious concerns about the vulnerability of industrial control systems (ICS) and highlights the need for … Read more
Gunra Ransomware Exploits Critical Flaws in Fortinet and Schneider Electric Devices, Breaching Networks Worldwide In a concerning wave of cyberattacks, Gunra ransomware has been linked to breaches across multiple industries, leveraging critical vulnerabilities in network security devices from Fortinet and Schneider Electric. The attacks have left organizations scrambling to contain the damage, with some still … Read more
Malicious MCP Servers Can Hijack AI Coding Agents, Exfiltrate Sensitive Data A disturbing trend has emerged in the cybersecurity landscape, where malicious servers are exploiting vulnerabilities in machine learning (ML) and artificial intelligence (AI) coding agents to exfiltrate sensitive data. This sophisticated threat vector involves compromised Multi-Cloud Platform (MCP) servers that can split instructions to … Read more
A Critical Flaw in Windows 11 Enables Full System Takeover via USB Drive Researchers have discovered a serious vulnerability in Windows 11 that allows an attacker to take full control of a system simply by inserting a malicious USB drive. The flaw, which resides in the operating system’s autorun feature, can be exploited remotely and … Read more
A Stealthy Threat Lurks in AI Accelerators and Neo-Clouds: Cybersecurity Blind Spots Exposed The rapid growth of artificial intelligence (AI) has led to a surge in the adoption of specialized chips known as accelerators, which are designed to speed up AI workloads. These accelerators are being used in conjunction with a new type of cloud … Read more
OpenAI’s Astra Model Sparks Concerns Over Autonomous Cyberattacks A new AI model developed by OpenAI, called Astra, has been flagged as a potential cybersecurity risk due to its advanced capabilities in creating autonomous cyberattacks. The company has taken steps to mitigate this threat, but the incident highlights the growing concern of AI-powered attacks on real-world … Read more
Mozilla has taken swift action to address a potential security vulnerability after accidentally exposing its GPG signing subkey in a GitHub repository. The exposed key could have allowed an attacker to create malicious versions of Firefox and Thunderbird software that appeared authentic, but several factors mitigate the impact. The GPG (GNU Privacy Guard) private signing … Read more
A New Type of Supply Chain Attack Threatens WordPress Sites: Meet BdThemes In a disturbing example of how malicious actors can compromise even the most seemingly secure systems, a recent supply chain attack has left hundreds of WordPress sites vulnerable to takeover by rogue administrators. The culprit behind this breach is a theme supplier called … Read more