cybernews.work

Cybersecurity researchers have uncovered a sophisticated attack vector that exploits a review gap in AI-assisted code review processes. Dubbed “Ghostcommit,” this malicious technique conceals prompt injection instructions within images, allowing attackers to steal sensitive information from repositories without raising suspicion. The attack works by embedding the malicious instruction inside a PNG image file, which is … Read more

A US Cybersecurity Expert Sentenced to 70 Months in Prison for Helping Ransomware Gang Angelo Martino, a 41-year-old cybersecurity expert from Florida, has been sentenced to 70 months in prison after pleading guilty to charges of helping a ransomware gang while working as a negotiator. This is the third high-profile case in recent years where … Read more

DHS Database Hacked, Adobe Boosts Patch Cadence, and More: A Week in Cybersecurity Review In what’s being described as one of the most significant cybersecurity events this year, a top official at the US Department of Homeland Security (DHS) has pleaded guilty to charges related to ransomware attacks. Karen Serobovich Vardanyan, a 34-year-old Armenian national, … Read more

AI coding tools have revolutionized software development in recent years, promising to boost productivity and efficiency. However, as organizations increasingly rely on these tools, security risks are emerging that may outweigh the benefits of AI-generated code. A growing body of research suggests that AI-coded applications are vulnerable to a range of issues, from OWASP Top … Read more

Social media platforms are facing increasing pressure from governments around the world to restrict or ban minors’ access to their services. In recent months, several countries have introduced laws aimed at protecting children’s mental health and safety online, with some platforms already feeling the heat. Australia was the first country to introduce a law restricting … Read more

A critical vulnerability in Zimbra, an email server software used by millions worldwide, could allow attackers to execute malicious code within user sessions via specially crafted emails. The flaw, which affects versions 9.0 and earlier of the software, has been disclosed by researchers at Sanguine Security. Zimbra is a popular choice for businesses and organizations … Read more

AI Coding Tools Pose Hidden Security Risks Despite Productivity Gains A growing number of organizations are embracing AI coding tools to boost productivity and streamline software development workflows. However, these tools come with a price – and not just in terms of hefty subscription fees. According to various studies, the use of AI-generated code also … Read more

As governments around the world scramble to protect children from the perceived risks of social media, a growing number of countries are introducing laws that ban or severely restrict access to popular platforms for users under 16. Australia was the first to take this step, followed by Canada, the UK, and several US states, including … Read more

A Critical Vulnerability in ATM Security Software Raises Concerns Over Jackpotting Attacks Researchers have discovered a set of nine vulnerabilities in CryptWare CryptoPro Secure Disk, a full-disk encryption and pre-boot authentication solution used by both corporations and ATM manufacturers. The security flaws, revealed by principal researcher Matt Burch at the Black Hat USA 2026 conference, … Read more

Cybercriminals are increasingly targeting healthcare businesses, exploiting vulnerabilities to disrupt operations and steal sensitive patient data. In a disturbing trend, attacks on service providers and other healthcare-related companies more than doubled in the first half of 2026 compared to the same period last year. This surge is not surprising given that compromising a single provider … Read more