Cybersecurity - Page 2 of 3

GreyVibe Hackers Use ChatGPT and Gemini to Launch AI-Powered Cyberattacks

A Russian-linked threat group known as GREYVIBE has been running active cyberattack campaigns against Ukrainian military, government, and civilian targets since at least August 2025. What makes this group stand…

Cybersecurity

FROST Browser Attack: How Websites Spy on You Through SSD Activity

Researchers have discovered a new browser-based spying technique called FROST that lets websites track which tabs you have open and which apps are running on your device, all without you…

Cybersecurity

BTMOB RAT: The Android Malware-as-a-Service Stealing Data via Fake Apps

BTMOB RAT is an Android remote access trojan that ESET researchers have identified as a growing threat well beyond its origins in Brazil and Latin America. Unlike typical Android malware…

Cybersecurity

Glassworm Botnet Dismantled: CrowdStrike, Google, and Shadowserver Take Down Developer-Targeting Threat

A coordinated cybersecurity operation has permanently disrupted one of the most resilient botnets ever documented. On May 26, 2026, CrowdStrike, Google, and the Shadowserver Foundation simultaneously struck all four command-and-control…

Cybersecurity

CVE-2026-48710 (BadHost): Starlette Flaw Puts Millions of AI Agents at Risk

A high-severity vulnerability in Starlette, one of the most widely used Python web frameworks, allows attackers to bypass path-based authorization and steal credentials from AI agent servers. Tracked as CVE-2026-48710…

Cybersecurity

FBI Warns: Silent Ransom Group Now Sends Attackers In Person to Steal Data

The FBI issued a flash alert warning that Silent Ransom Group (SRG) has escalated its attack methods against U.S.-based law firms. Beyond phishing emails and fake IT support calls, SRG…

Cybersecurity

Fake Software Downloads Are Now Installing Cryptojacking Malware on Your PC

Downloading a popular PC utility from what looks like the official site and ending up with a cryptojacker quietly mining cryptocurrency on your GPU is exactly what this campaign does.…

Cybersecurity

CVE-2026-5426: KnowledgeDeliver Zero-Day Exploited to Deploy Godzilla Web Shell

Attackers exploited a critical zero-day vulnerability in the KnowledgeDeliver learning management system to deploy a memory-resident web shell across affected servers. The flaw, tracked as CVE-2026-5426, stems from a shared…

Cybersecurity

CVE-2026-48172: CISA Gives Federal Agencies 4 Days to Patch LiteSpeed cPanel Plugin Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given federal agencies four days to secure their servers against a critical privilege escalation vulnerability in the LiteSpeed user-end cPanel plugin.…