Microsoft has dealt a significant blow to cybercrime by taking down EvilTokens, a notorious device-code phishing service that compromised over 12,000 email inboxes. This operation was not only a major victory for the tech giant but also a stark reminder of the ongoing threat posed by sophisticated phishing tactics. EvilTokens worked by exploiting vulnerabilities in … Read more
**Malicious npm Package Tricks Developers into Exposing Credentials** A malicious package on the popular Node.js package manager npm has been discovered posing as a bug-bounty probe from Twilio, a leading cloud communication platform. The package, which was available for download until recently, can secretly exfiltrate sensitive credentials from unsuspecting developers’ systems, potentially leading to a … Read more
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers A critical security vulnerability has been discovered in WordPress, allowing attackers to execute malicious code on affected servers. The issue, identified as a “cross-domain privilege escalation” flaw, affects users who have enabled cross-site scripting (XSS) protection in their web application firewall … Read more
A Zero-Day Vulnerability in Check Point’s Management Servers Exposes Organizations to Targeted Attacks Check Point, a leading cybersecurity vendor, has issued a warning about a previously unknown vulnerability in its management server software. The zero-day exploit, which allows attackers to gain unauthorized access to sensitive systems, has already been used in targeted attacks against several … Read more
D-Link Warns of Maximum-Security Flaw in DIR-822A Routers, Exposing Millions to Remote Attacks D-Link has issued a critical warning about a maximum-severity vulnerability affecting its legacy DIR-822A dual-band Wi-Fi routers. The security flaw, identified as CVE-2026-86296, can be exploited without authentication or user interaction, allowing attackers to potentially crash the device’s DHCP daemon or execute … Read more
Google Workspace Breaches Reveal a Sobering Truth: Trust and Authorization Can Be Exploited with Ease Tomorrow, CyberNews.work will host a live webinar that sheds light on real-world Google Workspace breaches, exposing the vulnerabilities that allowed attackers to gain access to sensitive data. What’s surprising is not the sophistication of the attacks, but rather how easily … Read more
Cybersecurity Experts Takedown EvilTokens PhaaS Platform After Compromising 12,000 Microsoft Accounts A major disruption has been dealt to the EvilTokens platform, a phishing-as-a-service (PhaaS) operation that compromised over 12,000 Microsoft accounts across more than 10,000 organizations worldwide. The takedown effort was led by Microsoft’s Digital Crimes Unit (DCU), in collaboration with law enforcement and identity … Read more
A catastrophic flaw in the VeloCloud Orchestrator has been actively exploited, granting attackers unfettered access to enterprise networks through certificate-based setups. The vulnerability, which holds a CVSS (Common Vulnerability Scoring System) rating of 10.0 – the highest severity level – affects various organizations that utilize the platform for network management and security. The VeloCloud Orchestrator … Read more
A new and insidious form of cyber threat has emerged, leveraging AI-powered agents to rewrite the rules of lateral movement. This sophisticated attack vector exploits identity exposure to unlock active attack paths, allowing hackers to navigate corporate networks with unprecedented ease. The implications are dire, as these AI-driven attacks can evade traditional security measures and … Read more
A Critical SharePoint Flaw Enables Remote Code Execution, Exposing Users Worldwide Microsoft has acknowledged a critical vulnerability in its widely-used collaboration platform, SharePoint. Initially listed as a spoofing issue, the flaw was later found to allow an attacker with authenticated access to execute arbitrary code remotely. This significant security weakness affects a vast number of … Read more