cybernews.work

A flurry of high-profile security breaches and vulnerabilities have exposed weaknesses in our digital defenses, with artificial intelligence (AI) playing a double-edged role in both attacking and protecting systems. Android spyware has infected thousands of devices worldwide, while industrial control system (ICS) attacks targeting programmable logic controllers (PLCs) threaten critical infrastructure. One particularly concerning trend … Read more

A Worrying Trend Emerges as AI-Powered Vulnerability Discovery Tools Leave Organizations Scrambling to Keep Pace In recent months, a new wave of artificial intelligence (AI) powered tools has emerged, capable of discovering software vulnerabilities at an unprecedented rate. This surge in AI-facilitated vulnerability discovery has left many organizations struggling to keep up with the sheer … Read more

Russian Espionage Group Exploits Zimbra Zero-Day to Steal Mail and 2FA Codes, Leaving Thousands Exposed A sophisticated Russian espionage group has been identified exploiting a previously unknown vulnerability in the popular email server software Zimbra, compromising thousands of users’ sensitive information. According to experts, the attackers targeted organizations worldwide, making off with email content, as … Read more

Russian Espionage Group Exploits Zimbra Zero-Day Flaw, Steals Sensitive User Data A sophisticated Russian espionage group has been using a previously unknown vulnerability in Zimbra’s email software to steal sensitive user data, including emails and two-factor authentication (2FA) codes. The revelation highlights the ongoing threat posed by state-sponsored actors to organizations worldwide. The zero-day flaw … Read more

A New Era in Cybersecurity Assurance: FedRAMP 20X Ditches Narrative-Based Controls for Continuous Evidence The Federal Risk and Authorization Management Program (FedRAMP) has been a cornerstone of US government cybersecurity compliance since its inception. However, as of July 23, 2026, the long-awaited transition to Rev5 is coming to an end. This shift marks a significant … Read more

Microsoft’s 365 services were knocked offline for thousands of users on July 23, with popular tools like Teams and SharePoint inaccessible. The outage was widespread, with Downdetector logging over 2,400 complaints within an hour – a staggering increase from its normal baseline. The issue affects not only Microsoft Teams, but also other essential tools such … Read more

A sophisticated Chinese malware campaign, codenamed “JadeProx,” has been linked to an array of high-profile attacks targeting government and healthcare organizations worldwide. The attackers have leveraged a novel exploit called TriBack Loader, which uses artificial intelligence (AI) models to rapidly identify and exploit previously unknown software vulnerabilities. Researchers at cybersecurity firms have been tracking the … Read more

A new strain of ransomware, dubbed “Chaos,” is making headlines this week after its creators found an innovative way to evade detection and maximize damage. The malware uses a sophisticated tactic involving msaRAT, a remote access tool (RAT) typically used for espionage or malicious purposes, to route command-and-control (C2) traffic through unsuspecting browsers like Chrome … Read more

A Critical Flaw in Claude Cowork Exposes Macs to Unchecked AI Agent Escapes A concerning security vulnerability has been discovered in Claude Cowork, an artificial intelligence (AI) platform designed for remote work and collaboration. The flaw allows an AI agent running within a virtual machine (VM) on a Mac to potentially escape its confinement and … Read more

A New Era in Cybersecurity Assurance: FedRAMP Rev5 Replaced by Continuous Assessment Model The Federal Risk and Authorization Management Program (FedRAMP) has been at the forefront of cybersecurity standards for federal agencies and contractors. Its evolution from Rev5 to 20X marks a significant shift towards continuous, machine-readable assurance – a departure from the traditional narrative-heavy … Read more