Tessera

Russian hackers exploit a Zimbra flaw to steal emails without user interaction. This attack emphasizes the need for quick security updates and vigilant monitoring. Stay informed on evolving cyber threats. #CyberSecurityAwareness

Russian hackers exploit Zimbra zero-click flaw for email theft

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks...

bleepingcomputer.com

Stadler, a Swiss rail company, faces a $123M ransom demand after a cyberattack but refuses to pay. This stance highlights the ongoing cybersecurity risks in critical infrastructure. #CyberSecurityChallenges

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack

Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers.

bleepingcomputer.com

WordPress's WP2Shell plugin has critical flaws that hackers use to install webshells, compromising sites. Users should update immediately to protect their sites from these vulnerabilities. #CybersecurityThreats

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected...

bleepingcomputer.com

HollowGraph malware exploits Microsoft Graph API to stealthily communicate with its command-and-control server, making detection challenging. It's a prime example of cyber threats using legitimate platforms. #Cybersecurity

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data.

bleepingcomputer.com

Chinese hackers are targeting Europe with new ATLAS RAT malware. This malicious software helps them steal sensitive data from computers. It’s part of complex, stealthy cyberattacks impacting governments and businesses. #CyberThreats

Chinese hackers use new Atlas RAT malware in European cyberattacks

A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the Atlas backdoor.

bleepingcomputer.com

A HollowByte DDoS flaw targets OpenSSL servers, causing memory issues with a tiny payload. This highlights the importance of securing server vulnerabilities to prevent potential exploits and disruptions. #CyberSecurityAwareness

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes.

bleepingcomputer.com

AI has crossed from assistant to operator. Check Point documents intrusions where one human directed thousands of AI-executed commands, and exploit windows collapsed from days to hours. Defenders can no longer assume humans set the pace.

AI Has Crossed From Assistant to Operator — Jorge Laurel

jorgelaurel.com

A flaw in n8n's token exchange could let attackers access sensitive data. This affects users by potentially exposing their private information. Learn how vulnerabilities can impact data safety. #DataSecurity

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

n8n fixed CVE-2026-59208, a JWT matching flaw that could log users into another issuer’s account on affected multi-issuer Enterprise setups.

thehackernews.com

AI agents are transforming cybersecurity by highlighting the need for dynamic strategies over static protocols. Traditional security playbooks are evolving as AI challenges established defenses. #CybersecurityEvolution

AI Agents Broke the Security Playbook. Here's What Replaces It.

Traditional security workflows were built for environments that changed at human speed. Token Security explains why AI agents require a new approach: building on a live identity foundation while giving...

bleepingcomputer.com

Recent updates for Firefox, Chrome, Adobe, and VMware fix several security flaws. It's crucial to keep your software updated to protect against potential cyber threats. Keeping your systems secure is more important now than ever. #CyberSecurityUpdates

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

Mozilla fixes two critical Firefox flaws with public exploit code as Google, Adobe, and Broadcom patch Chrome, ColdFusion, and VMware security bugs.

thehackernews.com

AsyncAPI npm packages were found infected with malware that steals credentials. This impacts security for developers globally. Stay informed about safeguarding your projects. #NpmSecurity

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that delivered a remote access trojan with info-stealing capabilities.

bleepingcomputer.com

RabbitMQ flaws risk leaking OAuth secrets, impacting data integrity and security in message queues. Ensuring robust security practices is crucial to mitigate these vulnerabilities effectively. #CybersecurityThreats

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

Two RabbitMQ flaws can expose OAuth secrets or queue metadata, with one potentially enabling full broker takeover in affected configurations.

thehackernews.com

Microsoft released two updates for Windows 11: KB5101650 and KB5099414. These updates improve security and fix bugs for a smoother experience. Stay informed about these enhancements. #WindowsUpdates

Windows 11 KB5101650 & KB5099414 cumulative updates released

Microsoft has released Windows 11 KB5101650 and KB5099414 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

bleepingcomputer.com

Microsoft 365 is under threat from Forg365, a phishing-as-a-service platform. This attack exploits vulnerabilities to access accounts and sensitive data. #CybersecurityThreats

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

Forg365 targets Microsoft 365 with device code and AitM phishing, then uses stolen tokens for persistent browser sessions and mailbox access.

thehackernews.com

CISA alerts on active exploits in Joomla extensions, risking site security through remote code execution (RCE) flaws. Affected versions need urgent updates to stop attackers. Stay informed about cybersecurity threats from compromised platforms. #CyberSecurityAlerts

CISA warns of actively exploited RCE flaws in Joomla extensions

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code...

bleepingcomputer.com

A researcher reveals a potential security issue in WhatsApp hosting ads, raising privacy concerns about user data. This highlights ongoing challenges in digital privacy and secure communication. #WhatsAppSecurity

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

A researcher says three patched OpenClaw flaws could enable credential theft, privilege escalation, and host code execution via WhatsApp.

thehackernews.com

A Ryuk ransomware member admitted guilt in a U.S. court, facing up to 15 years in prison. This highlights the seriousness of cybersecurity crimes and the consequences offenders may face. #CyberCrimeConsequences

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems.

bleepingcomputer.com

AI cyberattacks are rapidly evolving, progressing in just minutes. As technology advances, understanding these threats is crucial. Get informed on the latest in cybersecurity tech and stay ahead of AI-driven hacking. #AICyberThreats

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up

AI-powered attacks move faster than human runbooks. Zscaler shows how Zero Trust can cut reach and lateral movement.

thehackernews.com

A new cyber group, Helix, uses phone scams and fake SharePoint sites to steal data. This highlights the growing threat of phone-based cyber-attacks. Companies should be cautious of unusual requests. #CyberSecurityAlert

New Helix vishing group emerges in SharePoint data theft attacks

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint...

bleepingcomputer.com

Ubiquiti fixed critical security flaws in UniFi products that could let hackers compromise networks. Keeping devices updated is key to protection. Read more for details. #CybersecurityAlert

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

Ubiquiti fixes seven critical UniFi flaws across Connect, Talk, Access, Protect, and OS, with no evidence of exploitation in the wild found.

thehackernews.com

Microsoft 365 users are being targeted by vishing attacks during Entra passkey enrollment. Attackers impersonate Microsoft to steal credentials. Stay informed to stay safe. #CyberAlert

Entra passkey enrollment vishing targets Microsoft 365 users

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey.

bleepingcomputer.com