Do Son Threat actors are using AI social engineering lures to distribute malware and steal credentials. Learn how fake ChatGPT and DeepSeek campaigns work.
cybernewswire
New York, New York, 16th June 2026, CyberNewswire
Discover why the US government enacted a Claude Fable 5 ban. Explore Anthropic's urgent negotiations over AI jailbreak flaws and strict export controls.
Discover how the controversial new Microsoft Teams Workplace Check-in feature tracks employee office attendance through corporate Wi-Fi connections.
UNK_DeadDrop phishing campaigns are targeting developers with fake jobs to deliver Overlord malware. Learn how to defend against this North Korean threat.
Discover the latest Telegram bot formatting options. Learn how to use rich HTML and Markdown to create engaging, sophisticated messages with advanced styles.
Bloomberg's Mark Gurman suggests Apple may build an OpenClaw competitor that lets Siri fully operate apps on iPhone, iPad, and Mac.
Discover how Fluffy Wolf phishing attacks target Russian organizations with the new PowerLoader malware to deploy PureRAT and Pay2Key ransomware.
curl will halt vulnerability reports throughout July 2026, dubbing it a "summer of bliss," and will delay its 8.22.0 release by two weeks.
AMD removed TSME support, weakening default memory encryption on affected CPUs. Learn what changed and how to protect your systems.
Hackers breached Novo Nordisk, stealing AI training data, model checkpoints, and pseudonymized clinical trial patient records, now held for ransom.
Discover how a simple phishing email triggers a complex Agent Tesla infection chain, using process injection and in-memory loading to steal sensitive data.
Discover the details of the recent Anthropic Claude lawsuit. Users claim deceptive advertising regarding the expensive Claude Max subscription usage limits.
Discover how the new MLTBackdoor malware family uses the ClickFix infection chain to establish footholds for ransomware attacks and lateral movement.
Three Tornado security vulnerabilities (CVE-2026-49853, CVE-2026-49855, CVE-2026-49854) risk credential leaks and DoS. Update to Tornado 6.5.6 now.
A critical Vitest RCE vulnerability (CVE-2026-53633, CVSS 9.8) has public PoC code. Browser Mode flaw enables config overwrite and remote code execution.
A Haskell TLS vulnerability (CVE-2026-9648) lets attackers bypass X.509 NameConstraints to impersonate domains. Update crypton-x509-validation to 1.9.1.
CISA warns of 7 Naxclow IoT vulnerabilities, including a hard-coded key (CVE-2026-28742) enabling device takeover of doorbells and cameras.
Two pre-auth FreeSWITCH heap buffer overflow bugs (CVE-2026-49841, CVE-2026-49840) hit mod_verto and libesl. Update to v1.11.1 to stay safe.
A critical phpBB authentication bypass (CVE-2026-48611) lets attackers hijack any account on thousands of forums. Update to 3.3.17 now.
Gone are the days when managing personal finances required a weekly trip to a local bank branch...
CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.