News
WinRAR Flaw Becomes Hacker Gold Mine: State Spies and Cybercriminals Still Exploiting Six-Month-Old Bug
2+ hour, 20+ min ago (423+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram Six months after a critical WinRAR vulnerability was patched, hackers from Russia, China, and cybercrime groups continue to exploit it'turning a fixed security flaw into one of 2025's most abused attack vectors....
Chinese Hackers Quietly Upgraded Their Favorite Backdoor — Now It's Stealing Browser Passwords Too
10+ hour, 45+ min ago (259+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram A Chinese state-sponsored hacking group has quietly supercharged one of its most reliable cyberespionage tools, transforming it from a simple backdoor into a comprehensive surveillance platform that now targets everything from browser…...
Hackers Are Actively Exploiting Critical Microsoft Office Flaw—Patch Now or Risk Takeover
11+ hour, 14+ min ago (413+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram Microsoft has scrambled to release an out-of-band security patch for a high-severity zero-day vulnerability in Office that attackers are actively weaponising in the wild. The flaw, tracked as CVE-2026-21509 with a CVSS…...
How OSINT Tools Improve Intelligence Gathering
1+ day, 16+ hour ago (1210+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram OSINT has evolved from simple Google searches into a sophisticated discipline powered by artificial intelligence, machine learning, and automated data processing. The rise of generative AI has led to a 1200% surge in…...
AMD CPUs Expose Critical Flaw: StackWarp Attack Breaks Security on Cloud Servers
1+ week, 4+ day ago (181+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram A newly disclosed hardware vulnerability in AMD processors threatens the foundation of confidential computing, allowing attackers to hijack secure virtual machines through a novel "freeze-release" mechanism that manipulates how CPUs track memory....
Two Missing Characters Nearly Compromised Every AWS Account Worldwide
1+ week, 4+ day ago (376+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram Security researchers at Wiz have exposed a hair-raising vulnerability that could have given attackers complete control over the AWS JavaScript SDK'the cornerstone library powering the AWS Console and two-thirds of all cloud…...
Node.js Patches Critical Flaws That Could Expose Secrets from Uninitialized Memory
2+ week, 13+ hour ago (218+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram Node.js developers need to patch immediately. The project released emergency updates across all active versions (20.x through 25.x) on Tuesday, addressing eight security flaws'three rated high severity'that could expose sensitive data or…...
17.5M Instagram Users Hit by API Scraping Attack—Reset Emails Flood Inboxes
2+ week, 3+ day ago (265+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram Your Instagram password reset email might not be a phishing scam'it could be the first sign that your contact details are already in the hands of cybercriminals. A massive scraping operation has…...
How 100,000 Automation Servers Became a Master Key to Enterprise Data
.png.webp)
2+ week, 4+ day ago (376+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram A critical security flaw in n8n'the workflow automation darling of the AI era'has exposed an estimated 100,000 servers to complete takeover, turning what should be productivity tools into potential launchpads for enterprise-wide breaches....
Cloud Security Threats in 2026: The Critical Risks Every Business Must Address Now
3+ week, 1+ day ago (1587+ words) Follow Cyber Kendra on Google News! | WhatsApp | Telegram The cloud security landscape has fundamentally changed. When a financially motivated threat actor successfully extracted massive volumes of records from Snowflake customer accounts in 2024, it wasn't through some sophisticated zero-day exploit." With…...