cybernews.work

Attackers have exploited a sophisticated campaign, dubbed ClickFix, compromising at least 31 organizations and leveraging the Polygon blockchain technology in a technique known as “EtherHiding” to obscure and automate malicious activity. This campaign has already targeted various businesses across e-commerce, professional services, and retail logistics sectors. GuidePoint Security’s Research and Intelligence Team (GRIT) released a … Read more

Security Nonprofit METR Hit by Credential Theft and Probing Attacks A security nonprofit that evaluates risks in frontier AI models has disclosed two cybersecurity incidents this week, including a breach that exposed an API key and led to the theft of $600,000 in public AI model credits. The attacks highlight the growing threat of credential … Read more

A critical vulnerability in Langflow, a low-code AI development platform, is being heavily exploited by attackers, marking the latest threat against this increasingly popular target. The remote code execution flaw, CVE-2026-0768, was initially disclosed in January and has since been observed being used to conduct reconnaissance, credential harvesting, and other malicious activities. The attacks are … Read more

Cybersecurity Threats in the Philippines Take a Dire Turn as Nuclear Agency Breached A recent cybersecurity incident has left the Philippines’ nuclear agency vulnerable, with attackers exploiting old and unpatched vulnerabilities to gain access to sensitive information. The breach highlights the growing threat landscape in the region, where political tensions between China and neighboring countries … Read more

A Critical Langflow Vulnerability is Being Widespread Exploitation, Marking a Growing Threat to AI Development Platforms A critical vulnerability in Langflow, a low-code development platform used for designing AI agents, has been heavily exploited by attackers. The flaw, identified as CVE-2026-0768, allows remote code execution (RCE) and was initially disclosed in January with a 9.8 … Read more

**Ransomware Groups Exploit Legitimate Employees to Bypass Security Measures** A disturbing trend has emerged in the world of cybersecurity, as ransomware groups increasingly turn to recruiting from within organizations themselves. By targeting employees with legitimate access, these malicious actors can bypass even the strongest security measures and wreak havoc on a company’s data and finances. … Read more

Attackers Quickly Exploit Critical Artifactory Flaw After Disclosure, Putting Thousands at Risk A critical vulnerability in JFrog’s Artifactory repository manager has been publicly disclosed, and malicious actors are already taking advantage of it. The flaw, identified as CVE-2026-82329, allows attackers to bypass authentication and gain administrative access to affected systems with ease. This has significant … Read more

A Sneaky Phishing Campaign Exploits Faronics Deploy Platform, Installs Malicious ScreenConnect Software Phishing actors have been using a legitimate endpoint management platform to gain remote control over victim computers and install malicious software. The attackers are abusing the cloud-based Faronics Deploy platform, which is designed for IT administrators to manage and deploy software remotely. By … Read more

A massive identity theft operation has come to light, exposing over 153 million drivers licenses and other sensitive documents from individuals in the United States and Canada. The illicit service, dubbed “Nexus,” offers these digital scans for purchase on a notorious dark web forum called Exploit, with some records dating back to 2025. What’s more … Read more

Malicious Insiders Are Becoming a Growing Threat to Corporate Security A disturbing trend is emerging in the world of cybersecurity: malicious insiders are increasingly helping ransomware groups gain access to corporate networks, resulting in devastating financial losses and reputational damage. According to recent research, insider threats are on the rise, with 56% of incidents attributed … Read more