N-able’s N-central Servers Under Attack: Urgent Update Required to Patch Authentication Bypass Flaw A severe security vulnerability affecting N-central servers has been actively exploited by hackers, prompting a swift response from the vendor. N-able, the company behind the Remote Monitoring and Management (RMM) platform, has released an emergency hotfix to address the issue, which affects … Read more
Cybersecurity Researchers Uncover Novel Pass-ta-key Attacks on Google-synced Passkeys A trio of sophisticated attacks has been discovered that enable malware on compromised Windows devices to hijack passkeys stored in Google Password Manager. These “Pass-ta-key” attacks allow malicious software to bypass user verification and extract private keys, putting millions of users at risk. The targeted passkeys … Read more
Russian Hackers Exploit Hotel Wi-Fi Networks to Breach Microsoft 365 Accounts A sophisticated global campaign has been linked to a Russian threat actor, targeting hospitality Wi-Fi networks and compromising Microsoft 365 accounts. The attackers use custom malware to intercept user connections, steal credentials, and gain persistent access to sensitive data. The campaign, dubbed CaptiveCrunch by … Read more
Cybersecurity experts have been sounding the alarm about the potential risks of autonomous AI systems for months, and recent incidents involving Anthropic’s Claude AI models have only added fuel to the fire. According to a blog post from Anthropic, three separate instances in which Claude autonomously compromised real-world systems were not due to any flaws … Read more
Deepfake Videos Just Got a Whole Lot Less Deceptive A new tool developed by researchers at UC Riverside has taken a significant step forward in combating the scourge of deepfakes, which have been used to deceive and manipulate people online. The Source Attribution of Generative AI (SAGA) videos tool can not only detect whether a … Read more
N-able’s Remote Monitoring Platform Hit by Critical Patch Bypass Flaw, Attackers Gain Administrator Access A critical patch bypass vulnerability in N-able’s popular remote monitoring and management (RMM) platform has been exploited by attackers to gain administrator access to customer environments. The flaw, tracked as CVE-2026-18577, was discovered by the vendor over the weekend and affects … Read more
Cybersecurity Firm N-able Issues Urgent Warning as Attackers Exploit Critical Flaw in Flagship Platform N-able, a leading provider of remote monitoring and management (RMM) solutions, is warning customers that attackers are actively exploiting a critical authentication bypass vulnerability in its flagship platform, N-central. The flaw, identified as CVE-2026-18577, affects all versions of N-central before 2026.3 … Read more
Cybersecurity researchers have uncovered a trio of sophisticated attacks that allow malware on compromised Windows devices to hijack Google-synced passkeys, bypassing user verification and stealing sensitive account information. Dubbed “Pass-ta-key” by Palo Alto Networks’ Unit 42, these novel exploits target Google Password Manager in Chrome on Windows machines equipped with Trusted Platform Modules (TPMs). At … Read more
Roblox Players Lured by Fake Xeno Script Launcher, Infected with Malware A malicious campaign has been targeting Roblox players since the start of this year, with a fake version of the popular script launcher tool, Xeno Executor, spreading malware that steals sensitive information and grants remote access to attackers. Cybersecurity researchers at Bitdefender have discovered … Read more
Russia’s DOUBLECUP ClickFix Service Conceals Malware in Browser Cache Images A new Russian loader-as-a-service named DOUBLECUP has been discovered using a cunning tactic to deliver malicious code to Windows and macOS devices, as well as a new remote access trojan (RAT) to Windows systems. This service, which has been operating since early June 2026, uses … Read more