A matter of national secrecy.
Senators accuse the White House of illegally withholding a secret surveillance court ruling. A suspected surveillance operation targets Starlink users. Attackers probe vulnerable Oracle E-Business…
Latest Cybersecurity News — Page 57
View all →
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. The service also…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec…
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the…
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK
A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable .NET loader. The recovered loader is binary-identical…
From Rules to AI and Back
This article discusses the evolution of fraud prevention techniques. Fraud-prevention systems have to balance several competing demands: catching fraudulent activity without blocking legitimate customers, adapting…
GitHub’s npm package firewall can block brand-new versions before they install
GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions,…
Chrome and Firefox updates fix serious security flaws. Install them now
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to…
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put…
Lapsed US snooping law still running as senators object
US senators have demanded the release of a secret court ruling on a surveillance law that lets American authorities obtain foreign companies’ and citizens’ data…
INJ3CTOR3 JOMANGY Now Steals FreePBX SIP Trunk Creds
The INJ3CTOR3 toll-fraud operation has given its FreePBX implant a dangerous new capability. Cyble Research & Intelligence Labs (CRIL) documented the JOMANGY PHP webshell in…
Apple rains on MIE-bypassing iPhone jailbreak parade with iOS update
Apple’s busy patch week includes iOS 27.2, which closes off most of the bugs security researchers exploited to “jailbreak” an iPhone protected by the company’s…