The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
This Red Agent POV focuses on business-logic flaws, and deep dives into a critical paywall bypass discovered in a leading B2B platform’s data API. As…
Latest Cybersecurity News — Page 327
View all →
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code…
Zoom warns of critical account takeover vulnerability
Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be exploited by an unauthenticated party to…
Destiny Stealer Is Expanding Across the US and Europe. Is Your Organization Ready?
Destiny Stealer activity is rising across Europe and the US, putting corporate accounts, remote access, email data, and sensitive business information at risk. A single…
Q&A: Businesses Are Running Out of Time to Prepare for the Quantum Threat, Warns Moona Ederveen-Schneider
Moona Ederveen-Schneider is a cybersecurity expert (and Most Inspiring Woman in Cyber Award winner 2026) with more than 20 years of experience across financial services, risk and…
OkoBot Malware Uses ClickFix and SeedHunter to Steal Ledger and Trezor Seed Phrases
A newly documented malware framework dubbed OkoBot is targeting cryptocurrency users with a multi-stage intrusion chain designed to capture Ledger and Trezor recovery phrases, browser…
Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones
Céline Dion is scheduled for 16 Paris concerts in 2026, from September 12 to October 17. Including the 10 additional shows announced for May 2027,…
Claude for Chrome flaw could let rogue extensions access your Gmail
First reported in May, ClaudeBleed is basically a “fake remote control” problem. A sneaky browser extension can pretend to be Claude’s own website and secretly…
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed with assistance…
Chaotic July Patch Tuesday threatens to overwhelm defenders
Security analysts are struggling to reckon with the sheer volume of common vulnerabilities and exposures (CVEs) addressed in Microsoft’s July Patch Tuesday update, which contains…
JB Hi-Fi Group finds new cyber security leader
JB Hi-Fi Group has appointed Kanchana Devi as its head of group cyber security following the departure of Daniel Eastley in April. Devi announced her…
Unpatched Cursor Vulnerability Exposes Users to Code Execution
An unpatched vulnerability in Cursor on Windows can be triggered for code execution when a developer opens a repository in the application, Mindgard reports. Cursor…