Cyber Security News (RSS Feed)

World's #1 Premier Cybersecurity and Hacking News Portal

https://cybersecuritynews.com/

Last Notes

2026-06-08 14:54:14 UTC

WhatsApp Disrupts NSO-Linked Cyberattack Targeting Users with Pegasus Spyware
Meta’s WhatsApp has identified and disrupted a fresh wave of spear-phishing campaigns linked to NSO Group, the Israeli spyware firm blacklisted by the U.S. government, and is now asking a federal court to hold the company in contempt for violating a permanent injunction issued just last year. In May 2025, a U.S. federal jury ordered […]
The post https://cybersecuritynews.com/whatsapp-disrupts-nso-cyberattack/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/whatsapp-disrupts-nso-cyberattack/

2026-04-03 07:25:19 UTC

CERT-EU Confirms Trivy Supply Chain Attack Led to European Commission AWS Breach
The European Commission’s primary web platform, “europa.eu,” recently suffered a severe data breach stemming from a supply-chain compromise involving the popular open-source vulnerability scanner, Trivy. On April 3, 2026, CERT-EU published an official advisory detailing how a threat actor known as TeamPCP exploited the compromised continuous integration and continuous delivery (CI/CD) tool to harvest Amazon […]
The post https://cybersecuritynews.com/european-commission-breach-trivy/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/european-commission-breach-trivy/

2026-04-03 06:42:35 UTC

North Korea-Linked Hackers Compromise Axios npm Package in Major Supply Chain Attack
A North Korea-linked threat group has successfully hijacked one of the most widely used JavaScript libraries on the internet, injecting malware into millions of potential development environments. On March 31, 2026, attackers gained access to the Axios Node Package Manager (npm) package using stolen maintainer credentials, turning a trusted tool into a weapon against unsuspecting […]
The post https://cybersecuritynews.com/north-korea-linked-hackers-compromise-axios-npm-package/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/north-korea-linked-hackers-compromise-axios-npm-package/

2026-04-02 08:24:48 UTC

New WhatsApp Attack Chain Uses VBS Scripts, Cloud Downloads, and MSI Backdoors
A new malware campaign is actively using WhatsApp to deliver harmful files directly to Windows users, exploiting the widespread trust placed in everyday messaging apps. The threat actors send malicious Visual Basic Script (VBS) files through WhatsApp messages, knowing that users rarely question attachments from familiar platforms. Once a recipient runs one of these files, […]
The post https://cybersecuritynews.com/new-whatsapp-attack-chain-uses-vbs-scripts/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/new-whatsapp-attack-chain-uses-vbs-scripts/

2026-04-02 02:31:41 UTC

Vim Modeline Bypass Vulnerability Let Attackers Execute Arbitrary OS Commands
A newly discovered high-severity vulnerability in the popular Vim text editor exposes users to arbitrary command execution on the operating system. Tracked as CVE-2026-34982, the flaw relies on a modeline sandbox bypass that triggers when a victim opens a specially crafted file. Security researchers “dfwjj x” and Avishay Matayev identified a vulnerability chain that affects […]
The post https://cybersecuritynews.com/vim-modeline-bypass-vulnerability/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/vim-modeline-bypass-vulnerability/

2026-04-02 02:05:20 UTC

Microsoft to Remove EXIF Data for Images Shared on Teams
In a significant move to enhance corporate privacy and operational security, Microsoft has announced an important update for its Teams platform. As part of the March 2026 feature rollout, Microsoft Teams will now automatically remove EXIF metadata from all images shared across chats and channels. This privacy-by-default measure aims to protect users from unintentionally leaking […]
The post https://cybersecuritynews.com/microsoft-remove-exif-data-teams/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/microsoft-remove-exif-data-teams/