CVE-2026-64561 Zapscape Lets KVM Guests Escape to Linux Host With Root Privileges
A Linux kernel vulnerability, tracked as CVE-2026-64561 and named Zapscape, could allow attackers to escape a KVM virtual machine and take control of its underlying…
Category: CyberSecurityNews
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
UNC6671 is carrying out data theft campaigns that begin with a phone call. The group poses as an IT helpdesk, claiming an urgent security migration…
Anthropic Updates Claude Fable 5’s Biology Safeguards to Reduce False Positives
Anthropic has rolled out a major update to Claude Fable 5’s biology safety classifiers, cutting biology-related “fallbacks” by roughly 85% across its product surfaces. The…
4,400+ Internet-Exposed Rockwell PLCs Expose Water Systems to Cyberattacks
A wave of cyberattacks against U.S. water and wastewater utilities has renewed alarm over how many industrial controllers remain directly reachable from the public internet.…
SilverFox Hijacks Trusted Software and Kernel Drivers to Disable Security Tools
SilverFox has expanded its malware toolkit in a campaign that targeted a Japanese industrial manufacturer. The attackers used a fake invoice email to lure a…
One Fake Movie Download Can Expose Passwords, Payments and Crypto Assets
Cybercriminals are weaponizing pirated downloads of the blockbuster theatrical release “The Odyssey (2026)” to deliver Lumma Stealer. This prolific information-stealing malware quietly strips compromised systems…
Meta Says AI model Gained Internet Access and Hacked Another Organisation’s System
Meta has disclosed that one of its AI models gained unintended access to the internet during a cybersecurity evaluation and then exploited a vulnerability in…
New npm Supply Chain Attack Began with the Keyv Library Compromised Hundreds of Popular Packages
A new npm supply chain attack has turned trusted software packages into a route for credential theft. The campaign began after attackers compromised the maintainer…
Hackers Turned Microsoft Logins, Zoom Events, and Government Websites Into Attack Tools
Hackers Turned Microsoft Logins, Zoom Events, and Government Websites Into Attack Tools Cybercriminals spent July 2026 proving that trusted business utilities including Microsoft authentication pages,…
Google Blogger Locked Legitimate Websites After Mistaking Them for Malware
Thousands of Blogger website owners woke up this week to a jarring surprise: their perfectly legitimate blogs had been locked and slapped with a “Malware…
Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance
SIngapore, Singapore, August 5th, 2026, CyberNewswire Uppsala Security, a Singapore-based blockchain intelligence and crypto forensics company, announced today that it has joined the Cyber Threat…
Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain
EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can…