Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse
A third-party human resources platform called TinyPulse has become the victim of a supply-chain attack that resulted in the exfiltration of records belonging to Nintendo…
Author: Cybernoz
Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)
CISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploited Vulnerabilities catalog, and ordered US federal civilian agencies to…
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates…
UK government publishes guidelines to ‘end era of outsourcing’ – will IT be in scope?
The UK government’s plan to “end an era of outsourcing” is starting with cleaners, security staff and government training, but how far could IT and…
FortiBleed: 86,000 Fortinet Device Credentials Compromised
CISA is urging organizations to harden their internet-accessible Fortinet devices in response to a large-scale credential theft campaign that likely impacts over 86,000 firewalls and…
24 Billion Stolen Credentials Exposed in Massive Data Leak
24 Billion Stolen Credentials Exposed in Massive Data Leak Pierluigi Paganini June 19, 2026 Exposed database with 24 Billion records revealed stolen credentials from infostealers,…
Threat actor adds advanced ‘EDR killer’ tools to ransomware-as-a-service platform
The principle behind BYOVD is simple enough: once an attacker has gained admin privileges through an account takeover, they load a legitimate, but old and…
NIST NVD Update: What it Means For Vulnerability Management
Recently, NIST announced an update to how the National Vulnerability Database (NVD) handles CVE enrichment to address the massive surge in vulnerability submissions. In the…
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. The flaw is tracked as CVE-2026-4020…
Chrome Extensions’ Critical Vulnerabilities Let Attackers Easily Compromise Millions of Browsers
Critical security flaws discovered in widely used Chrome extensions SiderAI and MaxAI are putting millions of users at risk, enabling attackers to fully compromise browser…
NSPM-12: The New Baseline for National Security Cybersecurity
National Security Presidential Memorandum 12 (NSPM-12), which was signed on June 12, 2026, creates a thorough national policy for National Security Systems (NSS) cybersecurity. Because…
eFAQ Investigates Alleged Scam and Reputation Attacks
New York, USA, June 19th, 2026, CyberNewswire eFAQ has published a documented investigation into a coordinated reputation attack campaign aimed at influencing brand perception in…