Google’s newest sign-in method asks you to look at the camera
Google’s selfie video sign-in option verifies that an account owner is a real person and that the account wasn’t created or used by computer programs…
Latest Cybersecurity News — Page 124
View all →
Google wants to store a selfie video of your face
Google has started rolling out a new way to recover access to your account if you’ve lost your phone or forgotten your password: a “selfie…
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers
A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITYSYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machines…
Russian APT Laundry Bear perfects zero-click phishing attack
An emerging threat actor linked with confidence to the Russian state is targeting Western organisations with a novel zero-click phishing attack technique designed to compromise…
Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses
Texas-based consumer finance company Upbound Group, Inc. says recent cybersecurity incidents led to a data breach that resulted in millions of dollars in fraudulent contract…
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers Pierluigi Paganini July 24, 2026 US agencies warn Russian group Laundry Bear is exploiting…
Despite multiple takedowns, botnets continue to grow
Botnets powered by residential proxy networks are proliferating, enabling cybercriminals of all types to evade detection by blending in with seemingly legitimate traffic, Lumen Technology’s…
How OpenAI hacked Hugging Face: an experiment gone wrong
Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong,…
Cloud Attack Retrospective: Threats to Watch for in 2025
Cloud environments are growing more complex—but attackers aren’t necessarily getting more advanced. Instead, they’re applying creativity to familiar weaknesses: misconfigurations, unpatched systems, and credential misuse. …
Hermes AI agent used to automate attack on Thai Finance Ministry
A threat actor used the open-source Hermes AI agent in unattended “YOLO” mode to automate post-exploitation activity during an alleged breach of Thailand’s Ministry of…
Bing Images Vulnerability Let Attackers Execute Remote Code on Microsoft Servers Using SVG File
Three critical remote code execution (RCE) vulnerabilities in Microsoft’s infrastructure, with two flaws in Bing Images allowing attackers to hijack backend image-processing servers using nothing…
New CISA/NSA Advisory Spotlights Russian Attacks on Zimbra Webmail
Overview of the Advisory On July 23, 2026, CISA, the NSA, the FBI, and their international partners issued a joint cybersecurity advisory alerting organizations to…