PentAGI – Automated AI-Powered Penetration Testing Tool that Integrates 20+ Security Tools: cybersecuritynews.com/pentagi-pene...

Google issues Emergency Chrome Security Update to address High-Severity PDFium and V8 Flaws: cybersecuritynews.com/chrome-emerg...

Splunk Enterprise for Windows Vulnerability Let Attackers Hijack DLLs and Gain SYSTEM Access: cybersecuritynews.com/splunk-enter...

Adidas Investigates alleged Data Breach – 815,000 Records of Customer Data Stolen: cybersecuritynews.com/adidas-inves...

OpenClaw’s Top Skill is a Malware that Stole SSH Keys and opened Reverse Shells in 1,184 Packages: cybersecuritynews.com/openclaws-to...

Selective Thread Emulation and Fuzzing expose DoS Flaws in Socomec DIRIS M-70 IIoT Device: cybersecuritynews.com/fuzzing-expo...

PromptSpy – First Known Android AI Malware uses Google’s Gemini for Decision-making: cybersecuritynews.com/promptspy-an...

Threat Actors using Fake Google Forms Site to harvest Google Logins: cybersecuritynews.com/threat-actor...

CISA warns of Honeywell CCTV Products Vulnerability Leads to Account Takeovers: cybersecuritynews.com/honeywell-cc...

Hackers leveraging nslookup.exe to Stage Payloads via DNS using Clickfix Attack: cybersecuritynews.com/clickfix-att...

XWorm Malware delivered via Fake Financial Receipts Targeting Windows Systems to steal Logins and Sessions: cybersecuritynews.com/xworm-malwar...

Critical Authentication bypass in better-auth API Keys Plugin allows Unauthenticated Account Takeover: cybersecuritynews.com/authenticati...

LockBit’s New 5.0 Version attacking Windows, Linux and ESXi Systems: cybersecuritynews.com/lockbits-new...

Joomla Novarain/Tassos Framework Vulnerabilities enables SQL injection and Unauthenticated File Read: cybersecuritynews.com/joomla-novar...

Apache NiFi Vulnerability enables Authorization Bypass: cybersecuritynews.com/apache-nifi-...

Malicious Chrome Extension steals Facebook Business manage 2FA Codes and Analytics Data: cybersecuritynews.com/chrome-exten...

Langchain Community SSRF Bypass Vulnerability enables access to Internal Services: cybersecuritynews.com/langchain-co...

25 Vulnerabilities in Cloud Password Managers allow Unauthorized Access and Modifications: cybersecuritynews.com/password-man...

Noodlophile Malware Creators evolve Tactics with Fake Job Postings and Phishing Lures: cybersecuritynews.com/noodlophile-...

Beware of Fake Shops from Threat Actors to attack Winter Olympics 2026 Fans: cybersecuritynews.com/beware-of-fa...

Single IP dominates Exploitation Campaign attacking Ivanti EPMM with RCE Vulnerability: cybersecuritynews.com/ivanti-epmm-...

Critical BeyondTrust Vulnerability exploited in the Wild to Gain Full Domain Control: cybersecuritynews.com/beyondtrust-...

Chrome 0-Day Vulnerability Actively exploited by Attackers in the Wild: cybersecuritynews.com/chrome-0-day...

Windows 11 KB5077181 Security Update causing some Devices to Restart in an Infinite Loop: cybersecuritynews.com/windows-11-k...

PentestAgent – AI Penetration Testing Tool with Prebuilt Attack Playbooks and HexStrike Integration: cybersecuritynews.com/pentestagent/

New Clickfix Exploit tricks Users into changing DNS Settings for Malware Installation: cybersecuritynews.com/new-clickfix...

Threat Actors exploit Claude Artifacts and Google Ads to Target macOS Users: cybersecuritynews.com/threat-actor...

Threat Actor Allegedly selling Critical Severity OpenSea 0-day Exploit Chain on Hacking Forums: cybersecuritynews.com/opensea-0-da...

CISA warns of Microsoft Configuration Manager SQL Injection Vulnerability Exploited in Attacks: cybersecuritynews.com/microsoft-co...

Chrome Extensions Infected 500K Users to Hijack VKontakte Accounts: cybersecuritynews.com/hijack-vkont...

OpenClaw 2026.2.12 Released With Fix for 40+ Security Issues: cybersecuritynews.com/openclaw-202...

Zimbra Security Update – Patch for XSS, XXE & LDAP Injection Vulnerabilities: cybersecuritynews.com/zimbra-secur...

New XWorm RAT Campaign uses Themed Phishing Lures and CVE‑2018‑0802 Excel Exploit to evade Detection: cybersecuritynews.com/new-xworm-ra...

Critical Vulnerability in Next-Mdx-Remote allows Arbitrary Code Execution in React Server-Side Rendering: cybersecuritynews.com/vulnerabilit...

287 Chrome Extensions exfiltrate Browsing History from 37.4 Million Users: cybersecuritynews.com/chrome-exten...

Odido Telecom suffers Cyberattack – 6.2 Million Dutch Customer Accounts affected: cybersecuritynews.com/odido-teleco...

CISA warns of Notepad++ Code Execution Vulnerability exploited in Attacks: cybersecuritynews.com/notepad-code...

Israeli Spyware Firm exposes Paragon Spyware Control Panel on LinkedIn: cybersecuritynews.com/paragon-spyw...

Apple 0-Day Vulnerability Actively Exploited in Sophisticated Attack to Target Individuals: cybersecuritynews.com/apple-0-day-...

VoidLink Framework enables On-Demand Tool Generation with Windows Plugin Support: cybersecuritynews.com/voidlink-fra...

Massive Spike in Attacks Exploiting Ivanti EPMM Systems 0-day Vulnerability: cybersecuritynews.com/ivanti-epmm-...

Prometei Botnet attacking Windows Server to Gain Remote Access and Deploy Malware: cybersecuritynews.com/prometei-bot...

Critical SandboxJS Vulnerability allows Remote Host Takeover – PoC Released: cybersecuritynews.com/sandboxjs-vu...

Threat Actors weaponize ChatGPT, Grok and Leverages Google Ads to Distribute macOS AMOS Stealer: cybersecuritynews.com/threat-actor...

BQTLock & GREENBLOOD Ransomware attacking Organizations to Encrypt and Exfiltrate Data: cybersecuritynews.com/bqtlock-gree...

Critical UUID Flaw in Fiber v2 on Go 1.24+ enables Session Hijacking, CSRF Bypass, and Zero-ID DoS Risk: cybersecuritynews.com/uuid-flaw-in...

Legacy IRC Botnet Campaign uses Automated SSH Compromise Pipeline to Enroll Linux Hosts at Scale: cybersecuritynews.com/legacy-irc-b...

MSHTML Framework 0-Day Vulnerability let Attackers Security Feature over Network: cybersecuritynews.com/mshtml-frame...

Microsoft Patch Tuesday February 2026 – 54 Vulnerabilities fixed, including 6 Zero-days: cybersecuritynews.com/microsoft-pa...

FortiSandbox XSS Vulnerability let Attackers run Arbitrary Commands: cybersecuritynews.com/fortisandbox...