Treasury Sanctions Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in Losses
The U.S. Treasury has sanctioned a Tren de Aragua network accused of using malware to empty ATMs across the United States. Authorities linked the alleged…
Category: CyberSecurityNews
Critical Fortinet FortiMail 0-Day Vulnerability Actively Exploited in Attacks
Fortinet has warned that attackers are actively exploiting a critical FortiMail zero-day vulnerability, putting exposed email security systems at risk. Tracked as CVE-2026-104286, the flaw…
16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled
Authorities have identified a 16-year-old as the suspected main operator of the KillSec ransomware group after an international law-enforcement operation disrupted the group’s infrastructure and…
FTC Investigating OpenAI, Anthropic and Other AI Models Over Potential Risks to Customers
The Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over potential risks their products pose to customers. An…
Hackers Exploit Zimbra Mail Servers With Crafted Emails to Gain Remote Access
Hackers are exploiting a serious flaw in internet-facing Zimbra mail servers with specially crafted emails. The weakness lets an outsider run commands on a vulnerable…
Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild
Cisco has disclosed a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager that attackers are actively exploiting. The flaw, tracked as CVE-2026-76504, could allow…
Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
Google has warned that threat actors are actively exploiting two critical Citrix NetScaler zero-day vulnerabilities to gain root access, install stealthy web shells, and move…
Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
Google released a Chrome Stable update fixing 32 security vulnerabilities across Windows, macOS, and Linux, including one critical and multiple high-severity flaws in V8, ANGLE,…
Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS
Cloudflare is building a certificate authority to make post-quantum website authentication practical without burdening TLS connections with oversized signatures. The company plans to issue conventional…
Hackers Broke Into Microsoft 365 Through Forgotten Accounts Nobody Was Watching
Hackers have breached Microsoft 365 environments by targeting accounts that were still active but unmonitored. An old password and missing sign-in protections gave intruders a…
Fortinet Uncovers SectopRAT Variant Hidden Inside Tampered Legitimate Windows Software
A SectopRAT variant has been found hidden inside tampered Windows software, allowing attackers to control an infected computer and steal sensitive information. The intrusion used…
OpenSSL Fixes High-Severity Flaw That Can Leak Server Memory in Plaintext
OpenSSL has released security updates for a high-severity vulnerability that could expose heap memory as plaintext during Datagram Transport Layer Security (DTLS) handshakes. Tracked as…