Cyber Security News

Phoenix, Arizona, September 24th, 2026, CyberNewswire SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is now available in open beta. The platform gives an MSP dated evidence about a prospect’s environment before the first meeting and keeps that evidence attached through delivery and reassessment. The open beta is available at […]

The post SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta appeared first on Cyber Security News.

Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption that RSA’s practical strength always tracks the cost of integer factorization. The attack converts temporary access to a raw, unpadded RSA signing or decryption service into a lasting capability to forge signatures or decrypt chosen […]

The post Researchers Found a New Way to Break RSA that Doesn’t Require Factoring the Key appeared first on Cyber Security News.

A newly documented campaign targeting people and organizations focused on Ukraine uses document-themed Windows shortcuts to install a malware downloader called VelvetCake. The goal appears to be gathering political and military intelligence about the war. The attackers likely send targeted emails with ZIP attachments. Inside are shortcut files that look like PDFs about peace proposals, […]

The post Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations appeared first on Cyber Security News.

AvisLoader is a Windows malware loader built to keep taking instructions after server takedowns. That makes it difficult to disrupt by simply removing a malicious website. It starts with a fake document-signing page that asks visitors to run a command themselves, turning a familiar verification request into a possible infection on the device. The signing […]

The post AvisLoader Windows Malware That Learned to Survive Even After Its Servers Are Taken Down appeared first on Cyber Security News.

Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several people, while defenders still work across separate monitoring and protection tools. Microsoft says this mismatch is driving a rethink of how security operations centers, or SOCs, should work. This is not a […]

The post Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense appeared first on Cyber Security News.

A new Android banking trojan is turning an app download into a banking PIN trap. Called RemControl, it hides behind fake download pages for a television streaming app, then waits for banking apps to open. The campaign uses pages that look like Google Play listings, even though the streaming app is not offered there. In […]

The post New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs appeared first on Cyber Security News.

Galago is a new ransomware operation drawing attention because it claims a partnership with the Panzer group. That matters, but its reach is uncertain: researchers have not confirmed a Galago intrusion or seen any victims published on its own leak site. The danger is what it may do next, not a verified attack wave. The […]

The post New Galago Ransomware Operation Emerges With Links to Panzer Group appeared first on Cyber Security News.

An autonomous OpenAI agent breached an Australian government Medicare statistics portal after a research task escalated into unauthorized system access, marking a reported world-first rogue AI intrusion into a government service. Prime Minister Anthony Albanese said the incident occurred on June 18, 2026, and raised Australia’s “extreme concern” with OpenAI CEO Sam Altman. The agent […]

The post OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach appeared first on Cyber Security News.

A critical security issue affecting Roundcube Webmail is now being exploited in the wild, prompting administrators to update exposed installations urgently. The Canadian Center for Cyber Security said open-source reporting confirmed active exploitation of CVE-2026-48842, an SQL injection vulnerability affecting Roundcube Webmail deployments running vulnerable versions. Roundcube published security advisories on May 24, 2026, addressing […]

The post Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild appeared first on Cyber Security News.

Check Point has warned that attackers are actively exploiting two critical vulnerabilities in its VPN and management products, allowing unauthenticated remote access and possible remote code execution. Both flaws carry a CVSS severity score of 9.8, and the company has released fixes that affected organizations should apply immediately. The first issue, tracked as CVE-2026-85102, affects […]

The post Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login appeared first on Cyber Security News.

A Firefox add-on posing as a tool for opening protected PDF documents can quietly turn a signed-in browser into a route to Google account theft. It waits until installation to obtain the instructions that make it dangerous, leaving little suspicious code for store reviewers. The extension appeared in the Firefox Add-ons store on September 3, […]

The post Malicious Firefox Extension Disguised as PDF Tool Steals Google Account Sessions appeared first on Cyber Security News.

Apache Software Foundation has released Tomcat 11.0.26 to address 12 security vulnerabilities spanning WebSocket, HTTP/2, AJP, authentication, and TLS certificate validation. The flaws, disclosed September 23, 2026, include four rated Important, three Moderate, and five Low, giving administrators a broad but urgent patching task across internet-facing Java application servers. Most existing Tomcat 11 deployments are […]

The post Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security appeared first on Cyber Security News.

Fake verification pages are steering people toward malware, but the web addresses behind the lures keep changing. Over five months, investigators tracked four different attack chains that began with the same hosting network, even as domains, downloads and command servers shifted. The pattern makes blocking individual websites a poor way to stop the first step. […]

The post The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves appeared first on Cyber Security News.

NVIDIA released a security update for its Infrastructure Controller software for Linux, addressing 14 vulnerabilities that could let attackers access sensitive system information, execute code, alter data, or disrupt affected environments. The update, published in NVIDIA’s September 2026 Infrastructure Controller security bulletin, affects versions 0 through 1.9. NVIDIA recommends that organizations clone or update the […]

The post NVIDIA Fixes Linux Component Flaws That Could Expose Sensitive System Information appeared first on Cyber Security News.

EvilTokens turns a Microsoft sign-in into a route to corporate email fraud. The phishing kit, first seen in February 2026, tricks people into approving an attacker’s login through a real device code process without handing over a password. The lure usually arrives as an urgent email about an invoice, shared file, document signature or expiring […]

The post The Phishing Kit That Turned Microsoft’s Login Flow Into an AI-Powered Fraud Machine appeared first on Cyber Security News.

Malware has moved into tools developers use to build and manage cloud infrastructure. A campaign linked to Graphalgo planted a remote access program in Terraform providers and Go software packages, turning routine development work into a possible route onto valuable machines. The packages did not behave like obvious malicious downloads. Some waited for particular inputs […]

The post The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths appeared first on Cyber Security News.

Cyberattacks are increasingly built around familiar actions: signing in, approving a payment, or using a trusted app. Artificial intelligence can help attackers repeat those actions at speed, making financial fraud and network intrusion harder to spot before damage is done. The threats take different forms. Some automate parts of a network break-in, while others imitate […]

The post AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse appeared first on Cyber Security News.

A free television offer led Android users to a dangerous download. Ads for a streaming service urged them to install an app that could give criminals control of their phones, rather than access to shows. The malware behind the campaign is called StreamRat. The ads targeted Spanish-speaking users in Spain. One campaign reached about 570,000 […]

The post A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices appeared first on Cyber Security News.

SolarWinds released Observability Self-Hosted 2026.2.3 to fix two serious vulnerabilities that could let unauthenticated attackers remotely execute code on affected observability servers. The flaws, tracked as CVE-2026-28324 and CVE-2026-28325, affect specific non-default configurations and communication modes. The update was released on September 22, 2026, and is especially important for organizations running SolarWinds Observability Self-Hosted in […]

The post Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers appeared first on Cyber Security News.

EU digital identity and GDPR compliance mandates, deepfake-driven fraud in authentication and verification, and credential-reuse fatigue pushed decentralized identity from conference-talk to contract. We scored ten players on standards depth, production evidence, and enterprise readiness and flagged the market’s churn honestly, because this category retires vendors faster than most. Microsoft Entra Verified ID ranks #1 […]

The post Top 10 Best Decentralized Identity Solutions in 2026 [Ranked & Scored] appeared first on Cyber Security News.