cybernews.work

A sophisticated new malware strain, dubbed GoSerpent, has been uncovered targeting Southeast Asian governments and diplomats for espionage purposes. The malicious software uses advanced tactics, including artificial intelligence-powered exploitation of software vulnerabilities, to infiltrate high-security networks. GoSerpent is a highly customized threat that was designed to evade detection by traditional security measures. Once inside the … Read more

A highly sophisticated malware campaign is underway, using fake software updates to steal sensitive browser tokens and Microsoft 365 files from unsuspecting users. The threat, dubbed ACR Stealer, is being distributed via clickbait-style lures known as ClickFix, which promise to fix perceived issues with popular browsers like Google Chrome and Mozilla Firefox. The malware works … Read more

Armenian authorities have detained a Russian tourist on a U.S. warrant, claiming him to be part of the notorious REvil hacking group, but his lawyers insist it’s a case of mistaken identity. This incident highlights the increasing use of artificial intelligence (AI) in cybersecurity and the potential risks that come with it. The individual in … Read more

As governments and military organizations around the world accelerate their development of autonomous systems, a critical question is emerging: can our existing trusted information infrastructure keep pace with the rapid advancement of these complex technologies? A recent trend suggests that AI models are increasingly being used to discover software vulnerabilities, raising concerns about the security … Read more

Google is facing pressure from European regulators to grant rival artificial intelligence (AI) assistants access to Android’s sensitive features, including its microphone, camera, and screen. The move could have significant implications for users’ data privacy and the competitive landscape of AI-powered services on the continent. The European Union has ordered Google to open up its … Read more

Japanese Frozen Food Giant Nichirei Hit by Cyberattack, Operations Disrupted Nichirei, a leading Japanese frozen food producer, has been severely impacted by a cyberattack that occurred on July 13. The company, which operates globally through 80 subsidiaries and provides cold storage warehousing services, disconnected its systems in response to the attack, causing disruptions to operations … Read more

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to government agencies to take immediate action against two critical security vulnerabilities in Fortinet’s threat detection platform, FortiSandbox. These flaws have been actively exploited by attackers in the wild, allowing unauthorized code execution through low-complexity command injection attacks. The good news is … Read more

Two Individuals Charged with Laundering $43 Million from Investment Fraud Schemes In a major blow to international cybercrime syndicates, US prosecutors have charged two individuals with their roles in a large-scale money laundering operation that funneled at least $43 million in stolen funds from investment scams into bank accounts in China. Zhuoying Chen and Haojie … Read more

As we approach the midpoint of 2026, Microsoft is reminding customers that Windows Server 2022 will soon reach its mainstream support end date. In just 90 days, on October 13th, this version of the server operating system will cease to receive new security updates and other maintenance releases. While it’s not the end of life … Read more

A Critical SharePoint Vulnerability Has Been Added to CISA’s KEV List, Posing Significant Risks for Enterprises Worldwide The US Cybersecurity and Infrastructure Security Agency (CISA) has taken swift action by adding a zero-day vulnerability in Microsoft SharePoint, known as CVE-2026-58644, to its Known Exploited Vulnerabilities (KEV) list. This move is a timely warning to organizations … Read more