Cyber Security News (RSS Feed)

World's #1 Premier Cybersecurity and Hacking News Portal

https://cybersecuritynews.com/

Last Notes

2026-06-20 03:23:20 UTC

AutoJack – A Single Web Page Can Hijack Your AI Agent to Execute Malicious Code
A critical exploit chain dubbed AutoJack that allows a single malicious web page to hijack Microsoft’s AutoGen Studio browsing agent and execute arbitrary code on the host machine without any user interaction beyond submitting a URL. AutoJack is a three-vulnerability exploit chain targeting AutoGen Studio, Microsoft Research’s open-source prototyping UI for multi-agent AI systems. The […]
The post https://cybersecuritynews.com/autojack/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/autojack/

2026-06-08 14:54:14 UTC

WhatsApp Disrupts NSO-Linked Cyberattack Targeting Users with Pegasus Spyware
Meta’s WhatsApp has identified and disrupted a fresh wave of spear-phishing campaigns linked to NSO Group, the Israeli spyware firm blacklisted by the U.S. government, and is now asking a federal court to hold the company in contempt for violating a permanent injunction issued just last year. In May 2025, a U.S. federal jury ordered […]
The post https://cybersecuritynews.com/whatsapp-disrupts-nso-cyberattack/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/whatsapp-disrupts-nso-cyberattack/

2026-05-22 17:16:57 UTC

LiteSpeed cPanel Plugin 0-Day Exploited in the wild to Gain Server Root Access
LiteSpeed has disclosed and patched a critical 0‑day privilege escalation flaw in its user-end cPanel plugin that is already being actively exploited to gain root access on Linux hosting servers. The bug is tracked as CVE‑2026‑48172 and affects LiteSpeed cPanel user-end plugin versions from v2.3 up to, but not including, v2.4.5. 0‑Day in LiteSpeed cPanel […]
The post https://cybersecuritynews.com/litespeed-cpanel-plugin-0-day-exploited/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/litespeed-cpanel-plugin-0-day-exploited/

2026-04-03 07:25:19 UTC

CERT-EU Confirms Trivy Supply Chain Attack Led to European Commission AWS Breach
The European Commission’s primary web platform, “europa.eu,” recently suffered a severe data breach stemming from a supply-chain compromise involving the popular open-source vulnerability scanner, Trivy. On April 3, 2026, CERT-EU published an official advisory detailing how a threat actor known as TeamPCP exploited the compromised continuous integration and continuous delivery (CI/CD) tool to harvest Amazon […]
The post https://cybersecuritynews.com/european-commission-breach-trivy/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/european-commission-breach-trivy/

2026-04-03 06:42:35 UTC

North Korea-Linked Hackers Compromise Axios npm Package in Major Supply Chain Attack
A North Korea-linked threat group has successfully hijacked one of the most widely used JavaScript libraries on the internet, injecting malware into millions of potential development environments. On March 31, 2026, attackers gained access to the Axios Node Package Manager (npm) package using stolen maintainer credentials, turning a trusted tool into a weapon against unsuspecting […]
The post https://cybersecuritynews.com/north-korea-linked-hackers-compromise-axios-npm-package/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/north-korea-linked-hackers-compromise-axios-npm-package/

2026-04-02 16:58:08 UTC

How Elite SOCs Cut Escalation Rates by Arming Tier 1 With Better Threat Intelligence
In a mature Security Operations Center, escalation is supposed to work like a scalpel, precise, intentional, and reserved for alerts that genuinely demand deeper expertise. But across many teams today, it has become something far less disciplined: a reflex, a pressure valve, a way to pass uncertainty up the chain. The consequences are predictable. Tier […]
The post https://cybersecuritynews.com/reduce-soc-escalation-rates-tier-1-alert-triage/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/reduce-soc-escalation-rates-tier-1-alert-triage/

2026-04-02 08:24:48 UTC

New WhatsApp Attack Chain Uses VBS Scripts, Cloud Downloads, and MSI Backdoors
A new malware campaign is actively using WhatsApp to deliver harmful files directly to Windows users, exploiting the widespread trust placed in everyday messaging apps. The threat actors send malicious Visual Basic Script (VBS) files through WhatsApp messages, knowing that users rarely question attachments from familiar platforms. Once a recipient runs one of these files, […]
The post https://cybersecuritynews.com/new-whatsapp-attack-chain-uses-vbs-scripts/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/new-whatsapp-attack-chain-uses-vbs-scripts/

2026-04-02 02:31:41 UTC

Vim Modeline Bypass Vulnerability Let Attackers Execute Arbitrary OS Commands
A newly discovered high-severity vulnerability in the popular Vim text editor exposes users to arbitrary command execution on the operating system. Tracked as CVE-2026-34982, the flaw relies on a modeline sandbox bypass that triggers when a victim opens a specially crafted file. Security researchers “dfwjj x” and Avishay Matayev identified a vulnerability chain that affects […]
The post https://cybersecuritynews.com/vim-modeline-bypass-vulnerability/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/vim-modeline-bypass-vulnerability/

2026-04-02 02:05:20 UTC

Microsoft to Remove EXIF Data for Images Shared on Teams
In a significant move to enhance corporate privacy and operational security, Microsoft has announced an important update for its Teams platform. As part of the March 2026 feature rollout, Microsoft Teams will now automatically remove EXIF metadata from all images shared across chats and channels. This privacy-by-default measure aims to protect users from unintentionally leaking […]
The post https://cybersecuritynews.com/microsoft-remove-exif-data-teams/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/microsoft-remove-exif-data-teams/

2026-04-01 04:31:16 UTC

Mercor AI Confirms Data Breach Following Lapsus$ Claims of 4TB Data Theft
Mercor AI has officially confirmed a severe data breach following claims by the notorious Lapsus$ hacking group that they stole 4 terabytes of sensitive company data. The incident, stemming from a recent supply chain attack on the open-source LiteLLM project, has exposed proprietary source code, internal databases, and massive amounts of user-verification data. The hacking […]
The post https://cybersecuritynews.com/mercor-ai-data-breach/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/mercor-ai-data-breach/