New U-Boot flaws could enable stealthy firmware attacks
Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy…
Latest Cybersecurity News — Page 354
View all →
One WhatsApp Message Turns OpenClaw Into a Remote Access Tool for Hackers
Three high-severity vulnerabilities in OpenClaw, the open-source AI coding assistant with 381,000 GitHub stars, that allow attackers to achieve remote code execution through a single…
Hackers Exploit CitrixBleed 2 to Hijack MFA-Protected Sessions and Deploy DragonForce Ransomware
Threat actors are exploiting the CitrixBleed 2 vulnerability, tracked as CVE-2025-5777, to hijack active NetScaler sessions protected by multi-factor authentication and gain a foothold in…
Microsoft is rewriting Windows patch guidance because of AI
Microsoft is recommending that organizations shorten Windows update deployment timelines, warning that advances in AI are reducing the time attackers need to identify and exploit…
Two Chrome updates in two days fix critical vulnerabilities
Updating Chrome is becoming an almost daily task lately. But it’s too important to ignore. On Wednesday, July 8, Google released another Chrome update, just…
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Ravie LakshmananJul 10, 2026Software Supply Chain / Malware Unknown threat actors compromised the Injective Labs SDK project’s GitHub repository and leveraged it to publish a…
Insurer Unum aims to deliver benefits of $20m using AI to re-write old Cobol code
Insurance company Unum, which provides cover for more than 45 million employees in the US, the UK and Poland, relies on ageing mainframe computers running…
Second alert from ACSC in two months shows unpatched CMS bugs still exploited
The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) has issued a second alert on content management systems in two months, warning that attackers are running…
China, India-Linked Hackers Both Targeted Same Pakistani Police Force
New research from SentinelOne shows that cyberespionage groups linked to both China and India spent more than two years quietly breaking into Pakistani law enforcement…
Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes
Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes Pierluigi Paganini July 10, 2026 Zimbra addressed a critical stored XSS vulnerability in its…
Armenian national pleads guilty to Ryuk ransomware attacks
An Armenian national who was extradited from Ukraine to the United States last year pleaded guilty to participating in a series of attacks in 2019…
CrowdStrike identifies five new prompt injection threats to AI
Unwitting User Context-Data Injection, an exploit that draws on the boundary between trusted data and executable instructions, tricking the user into introducing malicious instructions as…