Cybersecurity News

SolarWinds has issued fixes for a high-severity hard-coded key flaw in Access Rights Manager that could allow unauthenticated remote code execution.

Google's Gemini AI breached three real company systems in a May 2026 cybersecurity test, exposing gaps as autonomous agents gain internet access.

CISA has added three actively exploited Linux kernel flaws, led by critical kTLS bug CVE-2025-39682, to its KEV catalog and ordered rapid patching.

Screenshot service Gyazo has disclosed a breach affecting about 23.6M user records and 490M image metadata entries after an attacker exploited its upload server.

Researchers used Anthropic’s Claude to chain a forum exploit with an OpenAI SSO flaw, taking over employee accounts and reaching internal code before a rapid bug-bounty fix.

Microsoft has patched 18 vulnerabilities in Azure and Copilot AI services, mostly elevation-of-privilege bugs, with server-side fixes and no known exploitation.

Huntress details two Settra ransomware intrusions against retail and manufacturing firms, highlighting MeshAgent abuse, BYOVD tactics and defender takeaways.

US and Canadian authorities have seized NightmareStresser's domains, disrupting a long-running DDoS-for-hire platform tied to hundreds of thousands of attacks.

U.S. and Canadian authorities seized NightmareStresser DDoS-for-hire domains in an Operation PowerOFF push, disrupting attacks on schools, agencies and gamers.

Manhattan DA Alvin Bragg seized 12 AI porn sites hosting deepfake images of 1,200 victims, marking the largest celebrity deepfake takedown yet.