Cybersecurity News

Telegram patched an Android flaw that could let ordinary account holders execute code after a victim answered a voice call, researchers say.

The FBI seized Virtualine’s domain after officials linked the bulletproof host to CSAM, ransomware, sextortion, money laundering and cybercrime services.

An unpatched Windows 7 server exposed a factory network to EternalBlue, letting a penetration tester use a real admin password to seize control.

CISA added two Ivanti Connect Secure flaws to its exploited-vulnerability catalog after attackers chained three bugs to gain unauthenticated root access.

Syrian hacker Ahmad Umar Agha was sentenced to 42 months for a pro-Assad campaign targeting 47 Western media, business and government entities.

Cloudflare mitigated 18.2 million network-layer DDoS attacks in Q3, as short bursts surged and attacks shifted from CLDAP to DNS and UDP floods.

A Socket investigation found 319 Chrome extensions routing searches through operator-controlled servers, exposing queries from 13.4 million installs.

A trojanized Claude Code extension exposed up to 5,000 Cursor users to an SSH backdoor as researchers also disclosed a separate browser flaw.

WordPress 7.1.4 fixes an unauthenticated upgrade-process RCE after Wordfence blocked 62,969 attack attempts in 24 hours against exposed sites.

PHP2Shell attackers rooted exposed Palo Alto firewalls, while WordPress sites saw scanning but no confirmed compromises, researchers report.