Category: Cyber Security News

Microsoft has released updates to fix CVE-2026-45659, a high-severity remote code execution flaw in Microsoft SharePoint that could be abused by any authenticated attacker with minimal permissions. The company said the issue was found by MEOW and comes shortly after a separately exploited SharePoint spoofing bug, CVE-2026-32201, was patched. #CVE-2026-45659 #MicrosoftSharePoint…

Hackers are increasingly using AI to speed up attacks, find system weaknesses, and launch disruptive DDoS campaigns that can knock businesses offline. This webinar explains how organizations can respond with faster patching, smarter cloud security, and automated defenses to stay protected. #TheHackerNews #DDoS #AI…

MuddyWater is linked to a broad 2026 espionage campaign that hit at least nine organizations across nine countries, using DLL side-loading, Node.js, PowerShell, and ChromElevator to steal credentials and browser data. Separately, Iran-linked operations tied to Emennet Pasargad, Shahid Shushtari, and MOIS targeted organizations in the U.S., Israel, Saudi Arabia, Turkey,…

Anthropic says Project Glasswing has identified more than 10,000 high- or critical-severity vulnerabilities in widely used code, highlighting a shift in cybersecurity from finding flaws to verifying and fixing them. The report also shows strong results from partners and evaluations, including Cloudflare, Mozilla, and the UK AI Security Institute, while Anthropic warns that human patching capacity remains the main bottleneck. #ProjectGlasswing #Cloudflare #Mozilla #MythosPreview #ClaudeSecurity

This webinar from BleepingComputer and Tines will explain how fragmented network incident response workflows slow IT teams during high-pressure incidents. It will also show how automation, AI-assisted workflows, and intelligent coordination can reduce delays and improve incident resolution. #BleepingComputer #Tines #EdgarOrtiz

Microsoft is testing a new Defender for Endpoint capability that can automatically isolate compromised devices to stop lateral movement and reduce the impact of attacks. The preview feature keeps isolated endpoints connected to Microsoft Defender for Endpoint for monitoring and is part of automatic attack disruption. #Microsoft #DefenderforEndpoint

Varonis announced an integration with the Claude Compliance API to bring Claude Enterprise and Claude Platform activity into the Varonis Atlas AI Security Platform, giving security teams deeper visibility into AI usage and risk. The integration helps monitor conversations, investigate misuse across full sessions, and protect sensitive data and AI workflows across the lifecycle. #Varonis #ClaudeComplianceAPI #ClaudeEnterprise #ClaudePlatform #VaronisAtlas

The 7-Eleven data breach, linked to an April 8 incident affecting systems with franchise documents, likely exposed personal information for about 185,300 people. ShinyHunters claimed responsibility for the attack and later leaked data that included names, addresses, email addresses, and dates of birth. #7Eleven #ShinyHunters #HaveIBeenPwned…

Nimbus Manticore, an Iranian APT also known as Bohrium, Smoke Sandstorm, TA455, and UNC1549, has updated its phishing and payload delivery methods to target aviation and software companies. The group shifted to AppDomain hijacking, deployed new backdoors like MiniJunk and MiniFast, and expanded its focus toward US-based organizations amid heightened geopolitical…

Securing SaaS apps is difficult because traditional security controls do not fit software that runs on third-party infrastructure and is heavily shaped by user configuration. AppOmni is using AI tools like AskOmni and Marlin AI to improve visibility, analyze risky settings, and recommend remediation across expanding SaaS environments. #AppOmni #AskOmni #MarlinAI…

CISA has ordered U.S. federal agencies to patch a critically exploited Drupal SQL injection flaw, CVE-2026-9082, after attacks were detected in the wild. Imperva reports more than 15,000 attack attempts against nearly 6,000 sites, with Drupal installations in North America and Europe remaining widely unpatched. #Drupal #CVE-2026-9082 #CISA #Imperva #Shadowserver

Dutch authorities arrested two company owners accused of providing bulletproof hosting that supported Russian threat actors and helped evade European Union sanctions. The case is linked to Stark Industries, Mirhosting, and WorkTitans, which were allegedly used to keep infrastructure online for disruptive attacks and information manipulation against EU targets. #StarkIndustries #Mirhosting…

Lithuanian authorities are investigating a major data leak involving more than 600,000 entries from national registers, with access obtained through credentials belonging to authorized institutions. The breach has prompted tighter security measures and raised fears that sensitive information about officials and other targets may have been exposed, with suspicions pointing to…

ShinyHunters claimed responsibility for a 7-Eleven breach that exposed the personal data of more than 183,000 people after attackers accessed systems used to store franchisee documents. The stolen information included names, dates of birth, email addresses, phone numbers, and physical addresses, while ShinyHunters also posted a leaked archive after 7-Eleven reportedly refused to pay a ransom. #ShinyHunters #7Eleven #Salesforce

Microsoft has confirmed a known issue in the KB5087537 May 2026 security update that can break domain controller discovery on Windows Server 2016 systems with hostnames exactly 15 characters long. The bug can cause DCLocator calls to fail with ERROR_INVALID_PARAMETER and disrupt administrative tasks such as DFS Namespace management, while Microsoft continues investigating the issue. #WindowsServer2016 #KB5087537 #DCLocator #DFSNamespace