Cyber Security News

AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where attackers can hijack active sessions, bypass multi-factor authentication (MFA), and evade conventional endpoint security controls. This emerging threat model is forcing security operations centers (SOCs) to rethink how phishing attacks are detected, investigated, and contained, as […]

The post AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser appeared first on Cyber Security News.

NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affected systems if successfully exploited. This vulnerability, tracked as CVE-2026-65094, impacts the VIRTIO-Net component and has a CVSS v3.1 score of 9.0, indicating a high-risk issue for enterprise and cloud deployments. According to […]

The post NVIDIA BlueField Vulnerability Enables Code Execution Attacks appeared first on Cyber Security News.

Mac users are being targeted by a ClickFix campaign that turns a fake verification prompt into a path for malware installation. Victims are persuaded to copy a command from a web page, open Terminal, paste it, and run it, believing they are completing a routine CAPTCHA check. The attack does not rely on a software […]

The post macOS ClickFix Attack Deploys Atomic Stealer to Steal Passwords and Crypto Wallets appeared first on Cyber Security News.

A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. Assigned a maximum CVSS base score of 10.0, the vulnerability (tracked as CVE-2026-59726) was discovered by Noma Labs and affects Ruflo’s Model Context Protocol (MCP) Bridge, a core […]

The post Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents appeared first on Cyber Security News.

Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with access to sensitive conversations, including officials, military personnel, political figures, journalists, and Ukrainian leaders. It relies on deception, not a break in Signal’s end-to-end encryption, but the possible loss […]

The post Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages appeared first on Cyber Security News.

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used for forms and layout work in many web apps. Anyone who imported those beta builds […]

The post Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials appeared first on Cyber Security News.

Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]

The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on Cyber Security News.

A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The flaw, a high-severity Firefox JavaScript engine bug, was successfully exploited against Tor Browser by researchers at Nebula Security. Mozilla resolved the vulnerability in Firefox 151.0.3 on June 2, 2026, and the Tor Project […]

The post Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page appeared first on Cyber Security News.

Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found no evidence of a new breach at this time. A threat actor has advertised what they describe as a Revolut customer database on a cybercrime forum, […]

The post Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records appeared first on Cyber Security News.

Russia’s Federal Security Service (FSB) has formally charged Telegram founder and CEO Pavel Durov with aiding terrorism and issued a warrant for his arrest, escalating a long-running clash between the Kremlin and one of the world’s most widely used encrypted messaging platforms. The move, announced on July 29, 2026, centers on allegations that Telegram failed […]

The post Russia Charges Telegram CEO Pavel Durov With Aiding Terrorism, Issues Arrest Warrant appeared first on Cyber Security News.

A serious Linux kernel zero-day vulnerability capable of local privilege escalation (LPE) has been uncovered by security researchers, underscoring both the growing role of artificial intelligence in vulnerability research and the persistent security risks within complex kernel subsystems. Tracked as CVE-2026-53264, the flaw impacts the Linux kernel’s net/sched packet scheduling subsystem. It stems from a […]

The post AI-Assisted Research Uncovers Linux Kernel Zero-Day Enabling Root Privilege Escalation appeared first on Cyber Security News.

A little-known Chinese company may have helped build the hidden network used to support military-linked cyber operations around the world. Researchers say Guangdong Chanming, a firm with no obvious public-facing business, appears connected to tools designed to conceal online activity and move traffic through multiple systems. The company’s alleged role matters because covert relay networks […]

The post Researchers Say a ‘Ghost’ Chinese Company Built the Network Hiding PLA Cyberattacks appeared first on Cyber Security News.

Tengu, a newly observed Mirai-based botnet, is making infected IoT devices far harder to clean. It targets internet-facing embedded Linux systems, particularly devices that leave Telnet or other remote administration services exposed. Once installed, the malware can keep a device available for malicious activity and turn a routine removal attempt into an operational problem. The […]

The post New Tengu Mirai Botnet Reboots Your IoT Device When You Try to Kill It appeared first on Cyber Security News.

A set of high-severity vulnerabilities in libssh2 could expose SSH and SFTP client applications to memory corruption, crashes, and potential code execution when connecting to a malicious server. libssh2 is a widely used C library that provides support for the SSH2 protocol in various applications, including remote administration tools, file transfers, automated deployment tools, backup […]

The post libssh2 Vulnerabilities Allow a Malicious SSH Server to Corrupt Client Memory appeared first on Cyber Security News.

A newly disclosed exploit dubbed LegacyHive is raising alarms across the cybersecurity community after researchers confirmed it executes successfully on fully patched Windows systems running the July 2026 Patch Tuesday updates. Unlike conventional exploits that rely on memory corruption or unpatched software bugs, LegacyHive takes a structural approach. It abuses how Windows initializes user profiles […]

The post LegacyHive Exploitation Chain Bypasses Windows Security Even With July 2026 Patches Installed appeared first on Cyber Security News.

Victims of recent data breaches are receiving alarming emails that claim hackers recorded them through their webcams. The messages borrow the ShinyHunters name and cite a recipient’s real email address, turning a familiar sextortion script into a more personal and intimidating fraud. The goal is simple: pressure recipients into sending Bitcoin before they have time […]

The post Scammers Pose as ShinyHunters to Blackmail Data-Breach Victims With Fake Webcam Videos appeared first on Cyber Security News.

Dysphoria has emerged as a fast-moving IoT botnet that has infected an estimated 200,000 devices worldwide. The malware targets routers, cameras, gateways, and other embedded Linux systems, turning poorly protected equipment into resources for cybercriminal operations. Its operators use a mix of Telnet and SSH password attacks alongside known software flaws to gain access. This […]

The post Dysphoria Botnet Infects 200,000 IoT Devices and Hides C2 Behind Blockchain Domains appeared first on Cyber Security News.

Arista Networks has issued a security advisory for CVE-2026-16812, a critical command injection vulnerability affecting on-premises VeloCloud Orchestrator deployments. The company has confirmed that this vulnerability is actively being exploited in the wild, making immediate patching and reducing exposure essential for affected organizations. This vulnerability is classified as CWE-78, which refers to improper neutralization of […]

The post Hackers Exploiting Arista VeloCloud Orchestrator 0-Day Vulnerability in the Wild appeared first on Cyber Security News.

Progress has addressed five serious vulnerabilities affecting Kemp LoadMaster, ECS Connection Manager, and Connection Manager for ObjectScale appliances. These vulnerabilities, tracked as CVE-2026-59686 through CVE-2026-59690, impact several older product releases and could lead to complete appliance compromise when exploited by authenticated users. The company released a critical security bulletin on July 27, 2026. Progress stated […]

The post Five Progress LoadMaster Flaws Let Attackers Execute Commands and Gain Root Access appeared first on Cyber Security News.

Multiple high-severity vulnerabilities have been identified in FFmpeg, the widely used open-source multimedia framework. These flaws impact media parsing, decoding, filtering, and encoding components and can be triggered when an application processes malicious files. Several issues can lead to heap memory corruption, which may cause an affected application to crash and, in certain scenarios, could […]

The post Multiple FFmpeg Vulnerabilities Allow Attackers to Corrupt Memory Via Malicious Video File appeared first on Cyber Security News.