3+ week, 2+ day ago   (356+ words) A limited CRLF injection flaw can be escalated into a severe HTTP desynchronization attack, poisoning CDN caches and delivering XSS payloads to users on legitimate websites.The attack, called CRLF-Powered Desync, begins when an application incorrectly handles encoded carriage return…...

6+ day, 11+ min ago   (1228+ words) Weekly Cybersecurity Newsletter Bulletin - CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and... CyberSecurityNews This edition of the weekly cybersecurity newsletter bulletin covers critical zero-day discoveries, nation-state router compromises, emerging autonomous AI attack vectors, and major cloud identity incidents. Below…...

2+ week, 3+ day ago   (657+ words) A new remote access trojan called CoreRAT is giving the Core Werewolf threat group a way to take over infected Windows systems. The malware appeared in campaigns observed from June through July 2026, though evidence shows it has been active since…...

3+ week, 1+ day ago   (363+ words) Kaspersky researchers investigating attacks on Russian organizations discovered that legitimate TrueConf video conferencing client installers were secretly bundled with PhantomCore malware, a tool associated with the Head Mare APT group. The malicious installers were distributed directly from a TrueConf server…...

3+ week, 2+ day ago   (657+ words) Firefox users are facing a coordinated campaign of malicious add-ons that masquerade as cryptocurrency wallets, themes, and simple browser tools. The extensions can trick victims into disclosing recovery phrases, private keys, login details, and clipboard data, placing digital assets and…...

1+ week, 2+ day ago   (397+ words) A security researcher known as Nightmare-Eclipse, who also goes by the names Chaotic Eclipse and MSNightmare, has released a project that claims to take advantage of a security flaw in the CrowdStrike Falcon Sensor. This flaw allows for local privilege…...

5+ day, 12+ hour ago   (578+ words) A stealthy Linux rootkit is giving attackers a new way to keep control of compromised F5 BIG-IP Access Policy Manager servers. Instead of leaving an obvious malicious PHP file behind, it places a web shell only in the memory used by…...

5+ day, 16+ hour ago   (386+ words) Roundcube Webmail has released security updates for its 1.6 LTS and 1.7 branches, fixing 12 vulnerabilities that could expose users and servers to cross-site scripting, email header injection, cross-user data access, remote-content bypasses, and server-side request forgery attacks. The new releases, Roundcube 1.6.19 and…...

3+ week, 1+ day ago   (622+ words) Anthropic has expanded access to its frontier AI cyber-defense capabilities by making Claude Mythos 5 available in Claude Security, enabling enterprise customers to scan codebases for vulnerabilities and receive AI-generated remediation guidance. The move is designed to give defenders stronger vulnerability…...

3+ day, 18+ hour ago   (595+ words) A new U.S. government advisory has raised concerns over large-scale attempts to copy the capabilities of leading artificial intelligence systems. The activity did not involve conventional malware, but instead focused on harvesting model outputs at a scale that could accelerate rival…...