Latest Cybersecurity News
View all →
Lateral movement risks in the cloud and how to prevent them – Part 3: from compromised cloud resource to Kubernetes cluster takeover
In our previous blog post in this series covering lateral movement in the cloud, we introduced lateral movement techniques from the Kubernetes to the cloud…
A matter of national secrecy.
Senators accuse the White House of illegally withholding a secret surveillance court ruling. A suspected surveillance operation targets Starlink users. Attackers probe vulnerable Oracle E-Business…
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. The service also…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec…
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the…
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK
A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable .NET loader. The recovered loader is binary-identical…
From Rules to AI and Back
This article discusses the evolution of fraud prevention techniques. Fraud-prevention systems have to balance several competing demands: catching fraudulent activity without blocking legitimate customers, adapting…
GitHub’s npm package firewall can block brand-new versions before they install
GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions,…
Chrome and Firefox updates fix serious security flaws. Install them now
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to…