Category: Cyber Security News

Researchers found that the Adblock for YouTube Chrome extension, with over 10 million installs, can be configured to execute arbitrary JavaScript code on any website through a server-side change. While no malicious payload has been observed, its remote script injection capability, prior ad-injection history, and ties to removed extensions raise serious…

Nathan Austad, known online as “Snoopy,” was sentenced to 18 months in federal prison for his role in a 2022 credential stuffing attack that compromised tens of thousands of DraftKings accounts. The scheme caused major customer losses, led to restitution and forfeiture orders, and included evidence that the defendants knew the FBI was investigating them while the fraud continued. #DraftKings #NathanAustad #Snoopy

Russian authorities reportedly used Cellebrite’s UFED phone-cracking technology to access the device of human rights activist Andrey Pivovarov after his arrest and imprisonment, even after Cellebrite said it had canceled its contract with Russia. Citizen Lab said the data may have helped support later surveillance of other dissidents, including Anastasiya Burakova, in an operation linked to the FSB. #Cellebrite #UFED #AndreyPivovarov #AnastasiyaBurakova #FSB #CitizenLab

Organizations are still struggling with account takeover attacks even after investing in phishing defenses, identity protection, and multi-factor authentication. A BleepingComputer webinar on July 8, 2026 will show how Abnormal AI and Novant Health use behavioral AI to detect compromised accounts faster and automate investigation and response. #AbnormalAI #NovantHealth #BleepingComputer

Effective fraud prevention requires visibility across transaction, account, platform, and network levels to detect evolving attacks before they cause major losses. The example shows how a fraudster can exploit customer service, account changes, and multi-account patterns, while shared network intelligence helps stop similar activity faster. #BankX #IPQS #AccountTakeovers #MuleAccounts

CISA says CVE-2025-67038 is being actively exploited and affects Lantronix EDS5000 serial-to-IP device servers used to manage serial devices in OT environments. The flaw allows an unauthenticated attacker to inject OS commands as root, potentially enabling full device takeover, lateral movement, data theft, and disruption of connected systems. #CVE-2025-67038 #Lantronix #EDS5000…

Cal Water’s investigation found no evidence that Handala accessed its operational technology environment, despite the group’s claims of deep intrusion and potential disruption. The incident was limited to unauthorized access of a small number of accounts in third-party platforms, including one customer online account and a GPS location correction website. #Handala…

Runlayer has raised $30 million in a Series A round, bringing its total funding to $42 million, to expand its AI control platform for enterprise environments. The platform provides a secure control layer for AI tools and can detect threats such as prompt injections, tool poisoning, data exfiltration, output manipulation, intent…

CISA issued an emergency directive for CVE-2026-50751, a CVSS 9.3 authentication bypass in Check Point Remote Access VPN that was actively exploited weeks before disclosure. Qilin ransomware affiliates used the flaw to breach dozens of organizations by abusing IKEv1-enabled VPN gateways for authenticated access, exfiltration, and command-and-control. #CVE-2026-50751 #CheckPoint #CISA #Qilin #IKEv1

Google has released Chrome 149 to fix 18 security vulnerabilities, including four critical and 14 high-severity flaws, with most of the issues tied to use-after-free bugs that could potentially enable remote code execution. The update is now rolling out for Windows, macOS, and Linux, and Google has not reported any active…

NIST is seeking public feedback on updated IoT security guidelines in SP 800-213 Revision 1, which aim to better align cybersecurity requirements with current risk management needs. The draft emphasizes treating IoT products as system elements and includes clearer guidance for organizations integrating them into federal systems. #NIST #SP800-213 #SP800-213A…

Curl has released a major update that patches 18 vulnerabilities, including CVE-2026-8932, a flaw introduced in version 7.7 from 2001 that could allow authentication bypass in libcurl applications. The update was prompted by community research and AI-assisted discovery from Anthropic’s Mythos and Aisle, highlighting risks in long-forgotten code paths across the…

Nathan Austad, known as “Snoopy,” was sentenced to 18 months in prison for helping hack DraftKings accounts in the November 2022 attack. He and his co-conspirators compromised tens of thousands of accounts, stole $600,000, and used stolen access to add payment methods and profit from the scheme. #DraftKings #NathanAustad #Snoopy #JosephGarrison #KamerinStokes

Mandiant said an attacker used a previously unknown Cisco zero-day vulnerability to compromise a communications service provider and gain root-level access inside its network. The campaign targeted Cisco Catalyst SD-WAN Manager and related edge devices, with evidence of stealthy activity, unauthorized peering connections, password manipulation, and a rogue account named “troot.” #Cisco #Mandiant #CiscoCatalystSDWANManager #CVE-2026-20245 #CVE-2026-20127 #CVE-2026-20182