Microsoft Expands Mailbox Storage From 50 GB to 100 GB for Users
Microsoft has started expanding primary mailbox storage for Microsoft 365 Business Basic, Business Standard, and Business Premium users. Eligible users can now receive up to…
Category: CyberSecurityNews
What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window
The latest wp2shell vulnerability was one of the biggest WordPress security events in history. The critical vulnerability chain combined two flaws that allowed unauthenticated attackers to exploit…
What specifically allowed the agent to reach a real company’s systems during testing?
Wayne Anderson, Managing Director, Cybersecurity and Digital Innovation, BDO USA. First and foremost, the technical “walls” were reduced during the testing experience. One of the…
Grok Zero-Click Attack Steals Chat Data Using Encrypted Prompt Injection
A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the user’s name,…
Claude Mythos 5 Now Available in Claude Security for Vulnerability Scanning
Anthropic has expanded access to its frontier AI cyber-defense capabilities by making Claude Mythos 5 available in Claude Security, enabling enterprise customers to scan codebases…
Scammers Use WhatsApp Groups to Coordinate Millions in Victim Trades and Pump Real Stocks
Scammers are using WhatsApp groups to turn ordinary investors into an unwitting buying force. The operation does not need a hacked trading account or a…
Russian Hackers Abuse OAuth and WhatsApp Device Linking to Hijack High-Value Accounts
Suspected Russian cyber-espionage groups are increasingly turning ordinary sign-in and device-linking features into tools for account takeover. Their latest campaigns do not depend on breaking…
Apple’s Private Find My People Reverse-Engineered to Decrypt Live Shared Locations on Linux
A security researcher has successfully reverse-engineered Apple’s private Find My People protocol, demonstrating that a Linux machine can register with Apple’s internal services, receive an…
AWS Shows How to Stop a Hijacked AI Agent From Reading Data the User Cannot Access
Enterprises are racing to deploy AI agents that pull from databases, document repositories, SaaS platforms, and internal knowledge bases to automate workflows. But a quiet…
CRLF-Powered Desync Lets Attackers Poison CDN Cache and Serve XSS to Live Users
A limited CRLF injection flaw can be escalated into a severe HTTP desynchronization attack, poisoning CDN caches and delivering XSS payloads to users on legitimate…
Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials
Cloud Software Group has issued a critical security bulletin warning customers of two serious vulnerabilities affecting NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly…
Trusted Vendors Are Becoming Attack Paths: How US and EU Enterprises Can Reduce the Risk
A trusted supplier can become an attack path overnight. Large US and EU enterprises often rely on hundreds of vendors, giving attackers plenty of opportunities…