Cyber Security News

Zenity Labs disclosed a now-patched Salesforce Agentforce vulnerability, dubbed SalesBleed, that could have allowed attackers to steal sensitive CRM data without logging in, accessing a target Salesforce tenant, or requiring victim interaction. The attack relied on indirect prompt injection delivered through Salesforce Web-to-Lead forms. Salesforce investigated the reports and remediated the specific Trusted URLs bypass […]

The post Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration appeared first on Cyber Security News.

MacSync, a fast-changing macOS information stealer, has returned with a more complex delivery chain aimed at people who use cryptocurrency and developer tools. Instead of relying mainly on a pasted Terminal command, the latest activity begins with malicious disk-image files that pose as real applications. Operators can vary delivery between campaigns. Victims can encounter the […]

The post New MacSync Malware Turns macOS Apps Into Tools for Crypto and Password Theft appeared first on Cyber Security News.

Crypto casino Duelbits has confirmed a cybersecurity breach that drained approximately $7 million from its hot wallets, forcing the platform offline while investigators establish the attack’s root cause. Co-founder Joe disclosed the incident on X, assured customers that user funds remain safe, and said operations would resume after the investigation and wallet replenishment are completed. […]

The post Duelbits Confirms $7 Million Hot-Wallet Hack, forcing Systems offline appeared first on Cyber Security News.

Payy Network has confirmed that attackers exploited its Ethereum bridge contract and drained the contract’s entire balance, forcing the stablecoin payments platform to suspend network and wallet functions. According to a public statement from Payy, the incident occurred at approximately 4:21 UTC on September 24. The affected bridge contract supported transfers between Ethereum and the […]

The post Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network appeared first on Cyber Security News.

Cryptocurrency exchange Bitget has confirmed a security breach affecting approximately $351.6 million in assets after unauthorized transfers were detected in parts of its hot and warm wallet infrastructure. The incident was identified at 18:31 UTC on September 24, 2026, prompting the security team to activate emergency response procedures within minutes. Bitget said its offline cold […]

The post Bitget Hot Wallet Hacked – Attackers Stole $351.6 Million From Hot Wallets appeared first on Cyber Security News.

Cloudflare has patched a cross-tenant data exposure vulnerability in its Containers platform across its global, multi-tenant cloud computing infrastructure that could allow one customer’s workload to recover residual disk data left by another tenant on the same physical host. The issue also affected Cloudflare Sandboxes, which is built on Containers, but Cloudflare says it found […]

The post Cloudflare Containers Vulnerability Could Leak Data Between Customer Workloads appeared first on Cyber Security News.

Phoenix, Arizona, September 24th, 2026, CyberNewswire SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is now available in open beta. The platform gives an MSP dated evidence about a prospect’s environment before the first meeting and keeps that evidence attached through delivery and reassessment. The open beta is available at […]

The post SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta appeared first on Cyber Security News.

Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption that RSA’s practical strength always tracks the cost of integer factorization. The attack converts temporary access to a raw, unpadded RSA signing or decryption service into a lasting capability to forge signatures or decrypt chosen […]

The post Researchers Found a New Way to Break RSA that Doesn’t Require Factoring the Key appeared first on Cyber Security News.

A newly documented campaign targeting people and organizations focused on Ukraine uses document-themed Windows shortcuts to install a malware downloader called VelvetCake. The goal appears to be gathering political and military intelligence about the war. The attackers likely send targeted emails with ZIP attachments. Inside are shortcut files that look like PDFs about peace proposals, […]

The post Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations appeared first on Cyber Security News.

AvisLoader is a Windows malware loader built to keep taking instructions after server takedowns. That makes it difficult to disrupt by simply removing a malicious website. It starts with a fake document-signing page that asks visitors to run a command themselves, turning a familiar verification request into a possible infection on the device. The signing […]

The post AvisLoader Windows Malware That Learned to Survive Even After Its Servers Are Taken Down appeared first on Cyber Security News.

Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several people, while defenders still work across separate monitoring and protection tools. Microsoft says this mismatch is driving a rethink of how security operations centers, or SOCs, should work. This is not a […]

The post Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense appeared first on Cyber Security News.

A new Android banking trojan is turning an app download into a banking PIN trap. Called RemControl, it hides behind fake download pages for a television streaming app, then waits for banking apps to open. The campaign uses pages that look like Google Play listings, even though the streaming app is not offered there. In […]

The post New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs appeared first on Cyber Security News.

Galago is a new ransomware operation drawing attention because it claims a partnership with the Panzer group. That matters, but its reach is uncertain: researchers have not confirmed a Galago intrusion or seen any victims published on its own leak site. The danger is what it may do next, not a verified attack wave. The […]

The post New Galago Ransomware Operation Emerges With Links to Panzer Group appeared first on Cyber Security News.

An autonomous OpenAI agent breached an Australian government Medicare statistics portal after a research task escalated into unauthorized system access, marking a reported world-first rogue AI intrusion into a government service. Prime Minister Anthony Albanese said the incident occurred on June 18, 2026, and raised Australia’s “extreme concern” with OpenAI CEO Sam Altman. The agent […]

The post OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach appeared first on Cyber Security News.

A critical security issue affecting Roundcube Webmail is now being exploited in the wild, prompting administrators to update exposed installations urgently. The Canadian Center for Cyber Security said open-source reporting confirmed active exploitation of CVE-2026-48842, an SQL injection vulnerability affecting Roundcube Webmail deployments running vulnerable versions. Roundcube published security advisories on May 24, 2026, addressing […]

The post Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild appeared first on Cyber Security News.

Check Point has warned that attackers are actively exploiting two critical vulnerabilities in its VPN and management products, allowing unauthenticated remote access and possible remote code execution. Both flaws carry a CVSS severity score of 9.8, and the company has released fixes that affected organizations should apply immediately. The first issue, tracked as CVE-2026-85102, affects […]

The post Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login appeared first on Cyber Security News.

A Firefox add-on posing as a tool for opening protected PDF documents can quietly turn a signed-in browser into a route to Google account theft. It waits until installation to obtain the instructions that make it dangerous, leaving little suspicious code for store reviewers. The extension appeared in the Firefox Add-ons store on September 3, […]

The post Malicious Firefox Extension Disguised as PDF Tool Steals Google Account Sessions appeared first on Cyber Security News.

Apache Software Foundation has released Tomcat 11.0.26 to address 12 security vulnerabilities spanning WebSocket, HTTP/2, AJP, authentication, and TLS certificate validation. The flaws, disclosed September 23, 2026, include four rated Important, three Moderate, and five Low, giving administrators a broad but urgent patching task across internet-facing Java application servers. Most existing Tomcat 11 deployments are […]

The post Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security appeared first on Cyber Security News.

Fake verification pages are steering people toward malware, but the web addresses behind the lures keep changing. Over five months, investigators tracked four different attack chains that began with the same hosting network, even as domains, downloads and command servers shifted. The pattern makes blocking individual websites a poor way to stop the first step. […]

The post The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves appeared first on Cyber Security News.

NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities that could let attackers access sensitive system information, execute code, alter data, or disrupt affected environments. The update, published in NVIDIA’s September 2026 Infrastructure Controller security bulletin, affects versions 0 through 1.9. NVIDIA recommends that organizations clone or update the […]

The post NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information appeared first on Cyber Security News.