Latest Cyber Security News

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

Swati KhandelwalAug 07, 2026Web Security / Vulnerability PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by...

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can...

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

Swati KhandelwalAug 07, 2026Artificial Intelligence / Vulnerability A GitHub issue opened by an account with no repository privileges was enough to execute code...

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

Ravie LakshmananAug 07, 2026Cybercrime / Vulnerability A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the...

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Swati KhandelwalAug 06, 2026Virtualization Security / Linux Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1...
1...34353637Page 35 of 37

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Individuals and organizations in Cambodia have emerged as...

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark...

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Academic researchers have disclosed a Rowhammer attack impacting...

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

Ravie LakshmananAug 27, 2026Vulnerability / Web Security The...

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday...

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Ravie LakshmananAug 26, 2026Malware / Cyber Espionage Cybersecurity...

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new...

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

Swati KhandelwalAug 26, 2026Red Teaming / Security Operations...