Cyber Security News

A new open-source cybersecurity platform called CyberSentinel AI v3.0 has emerged as a significant development in autonomous security tooling, combining 33 real-world penetration testing and threat intelligence tools with a provider-agnostic AI engine that supports Claude, GPT-4o, OpenRouter, and fully offline local inference via Ollama. Unlike conventional AI security assistants that just suggest commands, CyberSentinel […]

The post CyberSentinel AI with 33 Security Tools, Including Nmap, SQLMap, ZAP, and uses Claude, GPT appeared first on Cyber Security News.

A critical exploit chain dubbed AutoJack that allows a single malicious web page to hijack Microsoft’s AutoGen Studio browsing agent and execute arbitrary code on the host machine without any user interaction beyond submitting a URL. AutoJack is a three-vulnerability exploit chain targeting AutoGen Studio, Microsoft Research’s open-source prototyping UI for multi-agent AI systems. The […]

The post AutoJack – A Single Web Page Can Hijack Your AI Agent to Execute Malicious Code appeared first on Cyber Security News.

CISA has added a critical LiteSpeed cPanel Plugin vulnerability, tracked as CVE-2026-54420, to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation in the wild. The flaw affects shared hosting environments and poses a significant risk to servers running CloudLinux with CageFS isolation. The vulnerability is classified as a UNIX symbolic link (symlink) […]

The post CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation appeared first on Cyber Security News.

Critical security flaws discovered in widely used Chrome extensions SiderAI and MaxAI are putting millions of users at risk, enabling attackers to fully compromise browser sessions and potentially access sensitive data across websites and local systems. Security researchers at Rebora Security uncovered vulnerabilities dubbed “Spyder” and “MaXSS” affecting AI-powered “agentic side panel” extensions. These tools, […]

The post Chrome Extensions’ Critical Flaws Let Attackers Easily Compromise Millions of Browsers appeared first on Cyber Security News.

Luxembourg, Luxembourg, June 19th, 2026, CyberNewswire Gcore’s Network Layer DDoS Protection helped Ucom maintain service continuity and operational readiness for critical public-facing broadcast services Gcore, the global edge AI, cloud, network, and security solutions provider, supported Ucom, one of Armenia’s leading telecommunications providers, in safeguarding public live broadcast infrastructure during Armenia’s 2026 parliamentary elections. Ucom […]

The post Gcore Helps Ucom Safeguard Public Live Broadcast Infrastructure During Armenia’s Parliamentary Elections appeared first on Cyber Security News.

A critical security vulnerability in the widely used Avada (Fusion) Builder WordPress plugin has exposed over 1 million websites to arbitrary file-deletion attacks, potentially leading to full-site compromise and remote code execution. The flaw, tracked as CVE-2026-8713 with a CVSS score of 9.1, was discovered by security researcher “daroo” and reported through the Wordfence Bug […]

The post Critical WordPress Plugin Vulnerability Exposes 1 Million Sites to File Deletion Attacks appeared first on Cyber Security News.

New York, USA, June 19th, 2026, CyberNewswire eFAQ has published a documented investigation into a coordinated reputation attack campaign aimed at influencing brand perception in search results and how AI assistants surface and summarize information.  The campaign followed a recognizable pattern. Dozens of accounts — most created days before publishing and most deleted shortly after […]

The post eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks appeared first on Cyber Security News.

Microsoft has confirmed a new bug introduced by its June 2026 Patch Tuesday security update that causes Windows to display internal Recycle Bin filenames instead of the original user-facing filenames in file-deletion confirmation dialogs. After installing the Windows security update released on June 9, 2026 (KB5094125), users attempting to permanently delete a single item from […]

The post Microsoft June 2026 Update Bug Exposes Recycle Bin Filenames in Deletion Dialog appeared first on Cyber Security News.

HazyBeacon, tracked as CL-STA-1020, is a stealthy cyber-espionage campaign targeting Southeast Asian government networks by abusing AWS Lambda Function URLs as covert command-and-control (C2) relays. Qualys Security researchers have observed attackers leveraging misconfigured serverless features and stolen cloud credentials to blend malicious traffic into trusted AWS infrastructure, making detection significantly harder. Traditional malware relied on […]

The post HazyBeacon Weaponizes AWS Lambda Function URLs for Stealth Command-and-Control Relays appeared first on Cyber Security News.

A newly discovered supply chain attack has put thousands of e-commerce websites at risk after a popular third-party reviews widget was quietly turned into a malware delivery tool. Threat actors behind the SmartApeSG campaign injected malicious JavaScript into the Okendo Reviews widget, a platform trusted by more than 18,000 brands worldwide, to push malware to […]

The post Hackers Abuse Third-Party Okendo Reviews Script to Spread SmartApeSG Malware Campaign appeared first on Cyber Security News.

INC ransomware has grown from a newcomer threat into one of the most dangerous ransomware operations worldwide. What began as an emerging criminal group in mid-2023 has claimed over 800 victims globally, placing it among the top ransomware groups this year. The group runs under a Ransomware-as-a-Service model, recruiting affiliates and supplying them with ready-built […]

The post INC Ransomware Uses Rust-Based Windows and Linux/ESXi Encryptors in New Attacks appeared first on Cyber Security News.

CISA has issued an urgent advisory warning organizations to secure their Fortinet devices following reports of a large-scale credential exposure campaign known as “FortiBleed.” The alert comes after threat actors were found exploiting compromised credentials linked to tens of thousands of internet-facing Fortinet systems worldwide. According to CISA, the FortiBleed activity involves leaked credentials associated […]

The post CISA Urges Hardening Fortinet Devices Following FortiBleed Attack appeared first on Cyber Security News.

Authorities have dismantled the criminal infrastructure behind SocGholish, one of the most persistent malware frameworks active since 2017, seizing 106 servers and 101 domains while remediating nearly 15,000 infected websites worldwide. The coordinated takedown was executed as part of Operation Endgame, launched in 2024 and recognized as the largest international operation ever conducted against ransomware […]

The post Authorities Dismantle SocGholish Malware Network — 106 Servers and 101 Domains Seized appeared first on Cyber Security News.

A novel BootROM vulnerability, dubbed usbliter8, affects Apple devices powered by A12, S4/S5, and A13 SoCs. The exploit chains a hardware-level bug in the Synopsys DWC2 USB controller with a firmware configuration flaw, enabling full application processor boot-chain compromise with no software patch possible due to the immutable nature of BootROM code. According to Paradigm […]

The post New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise appeared first on Cyber Security News.

Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards integration, a competitive-intelligence platform that synchronizes battlecard and win/loss data with Salesforce, to exfiltrate large volumes of […]

The post Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens appeared first on Cyber Security News.

Mozilla has released Firefox 152 to address multiple high-severity vulnerabilities that could allow remote code execution (RCE) and sandbox escape attacks. The security advisory, published on June 16, 2026, highlights a wide range of flaws affecting core browser components and emphasizes the urgency for users to update immediately. Several of the patched vulnerabilities are classified […]

The post Multiple Vulnerabilities in Firefox 152 Enables Remote Code Execution Attacks appeared first on Cyber Security News.

Hackers are increasingly finding new ways to abuse legitimate enterprise features, and Microsoft SQL Server 2025’s newly introduced AI capabilities are now raising serious security concerns. SpecterOps researchers have demonstrated that these built-in features can be leveraged for stealthy data exfiltration and even command-and-control (C2) communication, all from within the database engine itself. Microsoft introduced […]

The post Hackers Can Leverage SQL Server 2025 AI Features to Exfiltrate Sensitive Data appeared first on Cyber Security News.

A newly uncovered attack campaign has brought a rarely scrutinized Windows executable into the spotlight. Threat actors are actively abusing Fondue.exe, a legitimate Microsoft utility built into the Windows operating system, to side-load a malicious control panel file named APPWIZ.cpl and silently deploy dangerous malware on victim machines. The technique is deceptively clever because it relies entirely on […]

The post Hackers Abuse Microsoft Fondue.exe to Side-Load APPWIZ.cpl and Execute Malware appeared first on Cyber Security News.

Hackers have found a new way to get AI tools to do their dirty work without paying for it. Instead of using their own resources, attackers are hijacking exposed AI model servers and plugging them into automated hacking pipelines. The result is a self-directed attack tool that can scan targets, find weaknesses, write exploits, and […]

The post Hackers Abuse Legitimate RMM Tools to Maintain Persistent Access and Evade Detection appeared first on Cyber Security News.

Hackers are increasingly exploiting trusted AI platforms to deliver sophisticated social engineering attacks, with a recent campaign abusing Claude.ai’s shared chat feature to host malicious ClickFix instructions. According to TrendAI Research, attackers deployed 106 unique malicious hostnames across six campaign waves within seven weeks, continuously rotating infrastructure and testing different AI-themed lures to maximize effectiveness. […]

The post Hackers Abuse Claude.ai Shared Chat Feature to Host the ClickFix Social Engineering Instructions appeared first on Cyber Security News.