cyber security

cyber security news

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Ak July 26, 2026

Dubbed a malware operation sour business Victims’ browsers are being engineered to create the final Windows executable...

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

Ak July 24, 2026

North Korean dangerous actors are behind this Clickfix-style campaigns Those using typosquatted Zoom and Microsoft Teams domains...

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Ak July 23, 2026

A Russian state-backed espionage group spent months reading Western mailboxes through an unknown flaw in Zimbra’s webmail...

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

Ak July 22, 2026

Starting July 27, 2026, GitHub will cut public bug bounty payments at each severity level by at...

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Ak July 20, 2026

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, more than 800 of which claim to distribute...

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

Ak July 19, 2026

F5 has shipped a fix for a critical nginx flaw that allows a remote, unauthenticated attacker to...

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

Ak July 18, 2026

Eleven bytes will cause an unpatched OpenSSL server to set aside up to 131 KB of memory...

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Ak July 17, 2026

Swati Khandelwal17 July 2026Vulnerability/Web Security An anonymous HTTP request can run code on a WordPress site. The...

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

Ak July 16, 2026

Owen Flowers18, and Thalha ZubairThe 20 were each sentenced to five and a half years at Woolwich...

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

Ak July 15, 2026

Cybersecurity researchers have revealed details of a previously unknown Internet-of-Things (IoT) botnet framework dubbed tuxbot v3 evolution...