Blog

Cybersecurity

178 articles

All articles tagged Cybersecurity.

Microsoft Releases Windows 10 KB5094127 With 200 Security Fixes

Cybersecurity·4 min

Microsoft Releases Windows 10 KB5094127 With 200 Security Fixes

Microsoft has released KB5094127 for Windows 10 Extended Security Update subscribers, patching 200 vulnerabilities including three zero-day flaws. The update also introduces Secure Boot certificate monitoring as current certificates expire this month.

Huma Shazia·10 Jun 2026

Veeam Patches Critical RCE Flaw in Backup & Replication

Cybersecurity·4 min

Veeam Patches Critical RCE Flaw in Backup & Replication

Veeam has patched a critical vulnerability in its Backup & Replication software that allows remote code execution on domain-joined servers. The flaw, rated 9.4 severity, can be exploited by any domain user with low privileges. Ransomware gangs have historically targeted Veeam servers to delete backups before deploying attacks.

Huma Shazia·9 Jun 2026

French Government Messaging App Tchap Breached via Hijacked Account

Cybersecurity·5 min

French Government Messaging App Tchap Breached via Hijacked Account

A threat actor used a compromised user account to breach Tchap, France's encrypted messaging platform for civil servants. The attacker claims to have scraped over 640,000 messages and exfiltrated 13.5GB of data from public chat rooms.

Manaal Khan·9 Jun 2026

CISA Orders Federal Agencies to Patch Check Point VPN Flaw by June 11

Cybersecurity·4 min

CISA Orders Federal Agencies to Patch Check Point VPN Flaw by June 11

A critical authentication bypass vulnerability in Check Point VPN products is being actively exploited by Qilin ransomware affiliates. CISA has given federal agencies just three days to patch or mitigate CVE-2026-50751, which affects systems using the deprecated IKEv1 protocol.

Huma Shazia·9 Jun 2026

Cybersecurity·4 min

Google Patches Fifth Chrome Zero-Day of 2026

Google has released an emergency update to fix CVE-2026-11645, a high-severity vulnerability in Chrome's V8 JavaScript engine that attackers have actively exploited. This marks the fifth zero-day flaw patched in Chrome since January 2026.

Manaal Khan·9 Jun 2026

Gogs Patches Critical Zero-Day RCE Flaw After 90-Day Delay

Cybersecurity·5 min

Gogs Patches Critical Zero-Day RCE Flaw After 90-Day Delay

Gogs released version 0.14.3 to fix a critical argument injection vulnerability that allowed authenticated users to execute arbitrary code on servers. The patch came 10 days after Rapid7 publicly disclosed the flaw, and nearly three months after the initial report. Over 2,300 internet-facing Gogs instances remain at risk until administrators upgrade.

Huma Shazia·8 Jun 2026

Oxford University Discloses Second Data Breach of 2026

Cybersecurity·4 min

Oxford University Discloses Second Data Breach of 2026

The University of Oxford confirmed hackers compromised its CareerConnect platform on May 28, exposing names, emails, and encrypted passwords. This marks the second breach affecting the institution this year, following the Canvas LMS incident in early May.

Huma Shazia·8 Jun 2026

Meta AI Support Flaw Exposes 20,000 Instagram Accounts

Cybersecurity·5 min

Meta AI Support Flaw Exposes 20,000 Instagram Accounts

Attackers exploited a verification gap in Meta's AI-powered account recovery system to hijack over 20,000 Instagram accounts. The flaw allowed password resets without confirming email ownership, bypassing two-factor authentication entirely.

Huma Shazia·8 Jun 2026

Chinese APT Hid in US Networks for 18 Months Using New Malware

Cybersecurity·5 min

Chinese APT Hid in US Networks for 18 Months Using New Malware

A Chinese espionage group tracked as UNC5221 compromised an organization's network and its managed service provider, remaining undetected for at least 18 months. The attackers used previously undocumented malware called Plenet and AgentPSD alongside the Brickstorm backdoor to access Microsoft 365 environments.

Manaal Khan·6 Jun 2026

Verizon's 2026 DBIR: Vulnerability Exploits Now Top Breach Cause

Cybersecurity·7 min

Verizon's 2026 DBIR: Vulnerability Exploits Now Top Breach Cause

Verizon's 2026 Data Breach Investigations Report shows vulnerability exploitation overtook credential theft as the leading initial access method for the first time in 19 years. The report also found that 67% of workers use AI tools via personal accounts on corporate devices, creating a shadow IT data loss pipeline invisible to traditional security tools.

Huma Shazia·5 Jun 2026

CISA Warns of Active Exploits Targeting Android, Linux Flaws

Cybersecurity·4 min

CISA Warns of Active Exploits Targeting Android, Linux Flaws

The U.S. Cybersecurity and Infrastructure Security Agency added two vulnerabilities to its Known Exploited Vulnerabilities catalog. Federal agencies must patch by June 5, 2026. The flaws affect Android 14-16 and multiple Linux kernel versions.

Manaal Khan·3 Jun 2026

VS Code Zero-Day Lets Hackers Steal GitHub Tokens in One Click

Cybersecurity·5 min

VS Code Zero-Day Lets Hackers Steal GitHub Tokens in One Click

Security researcher Ammar Askar has published exploit code for an unpatched VS Code vulnerability that lets attackers steal GitHub OAuth tokens through a single malicious link. The flaw grants full access to all of a victim's public and private repositories. Microsoft has not yet released a patch.

Manaal Khan·3 Jun 2026

CISA Warns of Active Attacks on Two-Year-Old Oracle WebLogic Flaw

Cybersecurity·4 min

CISA Warns of Active Attacks on Two-Year-Old Oracle WebLogic Flaw

The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2024-21182 to its Known Exploited Vulnerabilities catalog, giving federal agencies until June 4 to patch. Over 1,500 vulnerable WebLogic servers remain exposed online despite Oracle releasing a fix in July 2024.

Manaal Khan·2 Jun 2026

Google Patches Android Zero-Day Exploited in Targeted Attacks

Cybersecurity·5 min

Google Patches Android Zero-Day Exploited in Targeted Attacks

Google's June 2026 Android security update fixes 124 vulnerabilities, including CVE-2025-48595, a high-severity zero-day flaw already being exploited in the wild. The vulnerability allows attackers to gain code execution and escalate privileges on devices running Android 14 or later without any user interaction.

Huma Shazia·2 Jun 2026

DriveSurge Hijacks Thousands of Sites to Spread Malware

Cybersecurity·5 min

DriveSurge Hijacks Thousands of Sites to Spread Malware

A threat actor called DriveSurge has compromised thousands of legitimate websites to distribute malware through fake browser updates and deceptive 'fix' prompts. The campaign targets Windows and macOS users by redirecting visitors through a traffic distribution system that profiles victims before choosing the most effective social engineering lure.

Manaal Khan·2 Jun 2026

Vulnerability Exploitation Now Takes 1.6 Days, Not Months

Cybersecurity·5 min

Vulnerability Exploitation Now Takes 1.6 Days, Not Months

The median time from CVE disclosure to active exploitation has collapsed from 4.2 months in 2023 to just 1.6 days in 2026. With over 130 vulnerabilities disclosed daily, traditional manual triage is failing. Organizations that cannot automate their alert-to-patch cycle are increasingly finding themselves in incident response mode rather than prevention.

Manaal Khan·1 Jun 2026

Critical Windows Netlogon Flaw Now Exploited in Attacks

Cybersecurity·5 min

Critical Windows Netlogon Flaw Now Exploited in Attacks

A critical Windows Netlogon vulnerability with a CVSS score of 9.8 is now being actively exploited in the wild. Belgium's national cybersecurity authority issued an urgent warning Friday, urging administrators to patch domain controllers immediately. The flaw allows unauthenticated attackers to execute code on any supported Windows Server version.

Huma Shazia·1 Jun 2026

California AG Sues 23andMe Over 6.9 Million User Data Breach

Cybersecurity·5 min

California AG Sues 23andMe Over 6.9 Million User Data Breach

California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding Co., alleging the genetic testing company failed to protect sensitive DNA and health data of nearly 7 million users exposed in a 2023 breach. The suit claims the company violated multiple state privacy laws and misled customers about its security practices.

Huma Shazia·30 May 2026

ChatGPT Share Links Now Deliver Malware via Fake Outage Pages

Cybersecurity·5 min

ChatGPT Share Links Now Deliver Malware via Fake Outage Pages

Security researchers discovered a campaign called 'LLMShare' that exploits ChatGPT's content-sharing feature to display convincing outage notices on legitimate OpenAI domains. The attack uses Google ads to funnel users toward malicious downloads disguised as ChatGPT desktop applications.

Manaal Khan·30 May 2026

Charter Data Breach Exposes 4.9 Million Customer Accounts

Cybersecurity·5 min

Charter Data Breach Exposes 4.9 Million Customer Accounts

ShinyHunters extortion gang breached Charter Communications via a voice phishing attack in April, stealing names, addresses, and phone numbers from millions of Spectrum customers. The telecom giant refused to pay the ransom, and the data has now been leaked on the dark web.

Huma Shazia·29 May 2026

Russian Hackers Use ChatGPT and Gemini to Build Malware

Cybersecurity·5 min

Russian Hackers Use ChatGPT and Gemini to Build Malware

A suspected Russian hacking group called GreyVibe has been using ChatGPT, Google Gemini, and other AI tools to create phishing lures and develop custom malware. The campaign has targeted Ukrainian military, government, and civilian organizations since August 2025. Security firm WithSecure discovered the operation and identified AI-generated code patterns that helped them track the group.

Manaal Khan·29 May 2026

Hackers Exploit FortiClient EMS Flaw to Deploy EKZ Infostealer

Cybersecurity·5 min

Hackers Exploit FortiClient EMS Flaw to Deploy EKZ Infostealer

Attackers are exploiting a critical authentication bypass vulnerability in FortiClient Enterprise Management Server to distribute credential-stealing malware disguised as legitimate Fortinet updates. The campaign turns a trusted endpoint management tool into a malware delivery system, with over 2,000 internet-exposed instances at risk.

Huma Shazia·28 May 2026

Romanian Hacker Gets 56 Months for Oregon Government Breach

Cybersecurity·4 min

Romanian Hacker Gets 56 Months for Oregon Government Breach

A federal court sentenced Catalin Dragomir to nearly five years in prison for hacking Oregon's emergency management network and selling access to compromised systems. The case highlights how international law enforcement cooperation is catching cybercriminals who once believed geography kept them safe.

Huma Shazia·28 May 2026

Carnival Cruise Breach Exposes 6 Million Customers' Data

Cybersecurity·5 min

Carnival Cruise Breach Exposes 6 Million Customers' Data

ShinyHunters extortion gang stole personal information from nearly 6 million Carnival customers in a social engineering attack. The breach exposed names, dates of birth, email addresses, and loyalty program details from the world's largest cruise operator.

Manaal Khan·28 May 2026

Chat on WhatsApp