Threat actors are already probing a critical flaw in Gitea, an open-source platform for managing Git repositories, just 13 days after its disclosure. The vulnerability, identified as CVE-2026-20896, affects Docker containers and allows attackers to escalate privileges on compromised systems. Gitea is used by thousands of organizations worldwide to host and manage their software development … Read more
A critical vulnerability in Adobe ColdFusion, a popular web application development platform, is being actively exploited by attackers just two days after Adobe released patches to address the issue. The vulnerability, tracked as CVE-2026-48282, affects multiple versions of ColdFusion and allows hackers to gain remote code execution on unpatched systems without requiring any user interaction. … Read more
As Software Creation Approaches the Speed of Thought, Security Lags Behind The latest innovation in software development has revolutionized the way applications are created. Generative artificial intelligence (AI) and Vibe Coding have made it possible for anyone, anywhere to build functional solutions at an unprecedented pace. However, this rapid progress has raised a pressing concern: … Read more
CyberNews.work Exclusive: China-Nexus Hackers Utilize Fake Tax Filing Utility to Deploy DcRAT Malware A sophisticated hacking operation, suspected to be linked to Chinese actors, has been uncovered using a fake Indian tax filing utility as a vector to deploy the highly potent DcRAT malware. The malicious software, which can evade detection by traditional security systems … Read more
As AI-powered threat detection and mitigation solutions become increasingly prevalent, organizations are facing a daunting challenge: evaluating the effectiveness of these advanced security platforms. A recent report highlights six key capabilities that set leaders apart from mere “bolt-on” AI solutions, but what does this mean for the average company struggling to stay ahead of evolving … Read more
A new threat is emerging on the cybersecurity landscape, one that leverages artificial intelligence (AI) models to discover previously unknown software vulnerabilities. These vulnerabilities can be exploited by attackers to gain unauthorized access to systems and data, making them a major concern for organizations worldwide. The AI-powered vulnerability discovery process typically involves training machine learning … Read more
A critical vulnerability in Linux’s Epoll feature has been made public, allowing attackers to gain root access on vulnerable systems. The “Bad Epoll” flaw, discovered by Jaeyoung Chung of Seoul National University’s Computer Security Lab, can be exploited using a proof-of-concept (PoC) code released by the researcher. The vulnerability affects Linux distributions based on kernel … Read more
North Korean Hackers Target Open Source Developers in Supply Chain Attacks A sophisticated campaign by North Korean hackers has been targeting open source software developers with a backdoor and an information stealer, compromising repositories on GitHub and other package registries to inject malicious code into popular projects. The operation, dubbed “PolinRider,” is part of a … Read more
A sophisticated hacking campaign, suspected of originating from China, has compromised Indian businesses and individuals by using a fake tax filing utility to deploy the DcRAT malware. The hackers’ tactics exploit a vulnerability in Microsoft’s Windows operating system, leveraging AI-powered threat analysis to evade detection. The attackers created a convincing fake tax filing tool, which … Read more
Cybersecurity teams are increasingly relying on Artificial Intelligence (AI) to identify and address software vulnerabilities, but experts warn that this new approach comes with its own set of challenges. In 2026, the use of AI-powered Security Operations Centers (SOCs) has become more prevalent, but not all platforms are created equal. As organizations explore the benefits … Read more