CyberSecurityNews

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

New Pass-ta-key attack reveals all the things we didn’t know about passkeys

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

Beware: attackers now using real Microsoft sign-in screen for phishing

7 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

A coordinated campaign dubbed Operation BlueDash is using fraudulent Microsoft Teams updates to install remote access tools on corporate systems.

Claude AI Shared Chats Reportedly Exposed in Google Search Results

20 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

5 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Fake Claude app promoted by Bing ads pushes SectopRAT malware

6 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

10 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

A critical remote code execution flaw dubbed 'wp2shell' allows unauthenticated attackers to run code within WordPress Core via SQL injection.

Zoom warns of critical account takeover vulnerability

Zoom warns of critical Windows vulnerability enabling account takeover

Dell PCs are shutting down after Windows 11’s July update, Microsoft admits and blocks it

7 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

CISA Urges SharePoint Hardening After New Exploitations

9 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Microsoft Entra ID gets passkeys default authentication starting September

Microsoft is replacing passwords with passkeys as the default authentication method for Entra ID starting in September.

New CrashStealer malware poses as Apple crash reporting tool

14 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

7 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Windows 11 Copilot now tells you what’s slowing down your PC, while using 1GB RAM itself

Microsoft is testing a new Copilot feature for Windows 11 designed to diagnose system performance issues, though its memory footprint is drawing scrutiny.

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

A study of 281 free Android VPN apps reveals critical security flaws, including unencrypted data transfers and massive user data leaks.

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

6 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Ubiquiti warns of new max severity UniFi OS vulnerability

Ubiquiti has issued patches for 25 security vulnerabilities within the UniFi ecosystem, including a flaw identified with a maximum severity score.

Cyber Security News Bulletin Weekly - Mythos is Back, WhatsApp Username, Kali Linux 2026.2, +20 Stories

Microsoft admits a Windows 11 bug is eating up to 500GB of storage, verify if you are affected

8 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Flipper Zero firmware development continues with community help

Flipper Zero is introducing a new community roadmap and contribution rules to sustain the development of its device firmware.

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

A critical Linux kernel vulnerability known as "Bad Epoll" or "DirtyClone" allows unprivileged users to gain root access on servers and Android devices.

Malware found spreading through sponsored ad on X

FBI warns Microsoft users about passwordless scam

The FBI has issued a warning to Microsoft users regarding a passwordless scam as AI-powered phishing attacks surge.

New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

A new Linux kernel vulnerability, dubbed DirtyClone, allows local users to gain root access by poisoning cached binaries.