Cybersecurity - Page 3 of 3

CVE-2026-48172: CISA Gives Federal Agencies 4 Days to Patch LiteSpeed cPanel Plugin Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given federal agencies four days to secure their servers against a critical privilege escalation vulnerability in the LiteSpeed user-end cPanel plugin.…

Cybersecurity

Charter Communications Data Breach: ShinyHunters Claims 42 Million Records Stolen

Charter Communications, the US telecommunications giant behind the Spectrum brand, has confirmed a data breach after ShinyHunters listed the company on its leak site and threatened to publicly release stolen…

Cybersecurity

Hackers Are Selling Deepfake KYC Bypass Kits That Fool Any Identity Check

Cybercriminals no longer need to break into systems the old way. In 2026, they show up to video calls looking and sounding like your CFO, pass identity checks with AI-generated…

Microsoft Defender for Endpoint Gets Automatic Device Isolation and Linux Scan Scheduling

Cybersecurity

Microsoft Defender Can Now Lock Down a Hacked PC Automatically. What You Need to Know

Microsoft added two preview capabilities to Defender for Endpoint in its May 2026 release: automatic device isolation as part of automatic attack disruption, and scheduled antivirus scans for Linux endpoints.…

ClickFix macOS Infostealer Found on BasedApparel.com: How the Attack Works

Cybersecurity

Hackers Used Kash Patel’s Website to Steal Mac Users’ Passwords

A security researcher discovered that BasedApparel.com, an online clothing store co-founded by FBI Director Kash Patel, was serving a ClickFix-based macOS infostealer to visitors. The attack used a fake Cloudflare…

Cybersecurity

Verizon 2026 Data Breach Investigations Report: Vulnerability Exploitation Is Now the Top Breach Entry Point

For the first time in 19 years, exploiting software vulnerabilities has overtaken stolen credentials as the primary way attackers break into corporate networks. Verizon's 2026 Data Breach Investigations Report (DBIR)…

Cybersecurity

Ghost CMS CVE-2026-26980 SQL Injection Exploited in Large-Scale ClickFix Campaign: What Site Owners Must Do Now

Ghost CMS CVE-2026-26980 is a critical SQL injection flaw actively exploited across 700 domains. Learn what versions are affected and how to fix it now. A critical SQL injection vulnerability…

Cybersecurity

How to Spot AI Security Scams Before They Trick You (2026 Guide)

AI security scams used to announce themselves. A strange sender name, clumsy spelling, or a poorly copied logo were usually enough to stop you before any damage happened. In 2026,…