Concise articles to keep you updated, without the fluff. https://cybernewsreports.com/about-us/
A supply chain attack targeting Klue has exposed sensitive customer data and disrupted integrations with Salesforce and other platforms. The ‘Icarus’ threat actor exploited a compromised legacy.
A critical server-side request forgery (SSRF) vulnerability (CVE-2026-20230) in Cisco Unified Communications Manager is being actively exploited to deploy webshells and achieve root access. Patches.
ShinyHunters claims to have stolen a massive 8.8TB of data from One Medical, Amazon’s healthcare provider, threatening release unless negotiations begin by June 22nd. The breach reportedly involves.
A sophisticated malware campaign is using WhatsApp to distribute malicious Visual Basic Script (VBS) files targeting Windows users across multiple countries. The attack, which began in late February.
A newly discovered, unpatchable vulnerability dubbed ‘usbliter8’ impacts Apple devices with A12 and A13 chips. The exploit leverages a hardware bug in the USB controller and firmware misconfiguration.
A sophisticated cryptocurrency clipper malware campaign has been active since February 2026, using Tor for command and control, spreading via malicious USB drives, and employing worm-like propagation.
Unauthenticated attackers are actively exploiting a high-severity authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks’ GlobalProtect VPN. CISA has added the flaw to its KEV.
A critical authentication bypass vulnerability (CVE-2026-50751) in Check Point VPN systems is being actively exploited by the Qilin ransomware affiliate. The flaw allows attackers to bypass user.
CISA’s Binding Operational Directive (BOD) 26-04 replaces BOD 22-01, mandating federal agencies to prioritize and patch vulnerabilities using a four-variable risk model with tiered timelines. The.
Cybercriminal group ShinyHunters is exploiting a critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft to target universities and higher education institutions, stealing data and.
