A custom web shell, built specifically for PTC Windchill servers, has been discovered in recent data theft attacks linked to the notorious Clop ransomware gang. The web shell’s advanced features allow it to decrypt credentials, enumerate file repositories, and steal files with ease, making it a formidable tool in the hands of cyber attackers. The … Read more
Ransomware Actors Masquerade as Incident-Recovery Services, Targeting Victims with Fake Offers of Aid A new and disturbing trend has emerged in the world of ransomware, where attackers are posing as incident-recovery services to deceive victims into paying them again. The tactic, uncovered by researchers at GuidePoint Security, involves a malicious entity claiming to have infiltrated … Read more
A critical search function outage has left millions of users unable to find content within Microsoft 365 apps, including Outlook on the web and OneDrive. According to an internal incident report seen by CyberNews.work, a recent deployment introduced a resource utilization issue that led to the problem. The company has already developed a fix and … Read more
Cybersecurity controls are not foolproof, even when they’re blocking known attacks. A recent report from Picus Labs highlights a disturbing trend: as attack tools become more sophisticated, traditional security measures are struggling to keep up. The Blue Report 2026, which measured the effectiveness of enterprise prevention and detection in real-world environments, revealed some shocking numbers. … Read more
A new wave of attacks is sweeping through corporate networks, exploiting a critical vulnerability in Microsoft’s SharePoint and Teams platforms. Dubbed “TwinLoot,” this sophisticated malware campaign has already compromised hundreds of companies worldwide, leaving sensitive data exposed to unauthorized access. At its core, TwinLoot leverages the vulnerabilities inherent in collaborative tools like SharePoint and Teams … Read more
A new wave of cyber threats has emerged, leveraging AI-powered “mind viruses” that can spread between agents through a previously unknown vulnerability in persistent prompt files. This exploit has significant implications for organizations and individuals alike, as it allows attackers to create a chain reaction of compromised systems. The concept of mind viruses is not … Read more
A Major Overhaul for Windows File Explorer: Microsoft Tests Faster Navigation and Customizable Context Menu In a significant move to improve user experience, Microsoft has begun testing a revamped version of its Windows File Explorer, which boasts faster navigation, a more customizable context menu, and reduced clutter. The updates are part of the ongoing effort … Read more
Cybercriminals have been exploiting a vulnerability in RubyGems, a popular package manager for Ruby developers, by creating typosquatted versions of legitimate packages. These malicious packages, which mimic the names of well-known gems, can steal browser credentials and cryptocurrency wallets from unsuspecting users. The affected packages, 16 in total, were discovered on August 18th, with most … Read more
A stealthy attacker has been exploiting vulnerabilities in both Salesforce and ServiceNow portals, compromising sensitive data and creating backdoors for future attacks. The hacker’s activities have been ongoing since 2025, with a total of eleven identified instances of identity exposure used to unlock active attack paths. The method behind the attacks is based on cross-domain … Read more
Cybersecurity Threat TCO Raises Alarm with TwinLoot Attacks on SharePoint and Teams A sophisticated attack campaign, code-named “TwinLoot,” has been spotted targeting organizations that use Microsoft’s collaboration platforms, SharePoint and Teams. The attackers have been leveraging a combination of clever tactics to steal sensitive credentials and move laterally across networks, leaving victims scrambling to contain … Read more