Category: Cyber Security News

Cloud Imperium Games disclosed a January 21, 2026 breach that allowed attackers read-only access to backup systems containing limited user account details. The company says no passwords or financial data were accessed and there is no evidence of public data leaks, though exposed contact information could be used in phishing attacks. #CloudImperiumGames #StarCitizen

Amazon confirmed drone strikes damaged three AWS data centers in the United Arab Emirates and one in Bahrain, causing an extensive outage that is disrupting dozens of cloud services. The company is restoring physical infrastructure and implementing software-based recovery and customer migration options while the UK NCSC warns of heightened risk of Iranian cyberattacks. #AWS #Iran

Arctic Wolf attributes a year-long SloppyLemming campaign (Jan 2025–Jan 2026) against government and critical infrastructure in Pakistan and Bangladesh that used two attack chains to deploy BurrowShell and a Rust-based keylogger. The intrusions relied on spear-phishing with PDF and macro-enabled Excel lures, ClickOnce and DLL side-loading to run NGenTask.exe/mscorsvc.dll and disguise…

Microsoft warns of OAuth-based phishing campaigns that abuse legitimate redirect features to funnel victims to attacker-controlled landing pages without stealing tokens. The attacks target government and public-sector organizations and deliver malware via ZIP archives that trigger PowerShell execution, DLL sideloading, and in-memory payloads, and some campaigns use AitM frameworks to harvest…

Following the U.S. Operation Epic Fury and Israel’s Operation Roaring Lion on February 28, Unit 42 reports a multi-vector retaliatory cyber campaign by state-aligned actors and global hacktivist collectives is escalating across the digital battlefield. Connectivity inside Iran has plunged to 1–4%, likely limiting in-country state actor operations while dispersed groups…

Researchers showed that tire pressure monitoring systems (TPMS) broadcast a persistent unique identifier in clear text, making the signals vulnerable to passive eavesdropping. By deploying five low-cost receivers for 10 weeks and collecting over 6 million messages from roughly 20,000 vehicles, they demonstrated that cheap hardware and software-defined radios can be…

A vulnerability in ModelScope MS-Agent’s Shell tool (tracked as CVE-2026-2256) allows crafted input to bypass regex-based blacklist checks and execute arbitrary OS commands. An attacker can inject content into prompts, documents, logs, or other inputs to cause the agent to run attacker-influenced shell commands, risking secret theft, payload deployment, workspace modification,…

Singapore will require all locally sold residential routers to meet Cybersecurity Labelling Scheme (CLS) Level 2 standards by the end of 2027 to strengthen protections against device compromise. The move, led by the Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA), follows findings that thousands of…

Google will adopt Merkle Tree Certificates (MTCs) in Chrome to make HTTPS certificates resilient against future quantum attacks while avoiding bulky post-quantum X.509 chains. The company is collaborating with Cloudflare and the PLANTS working group to test MTCs and will roll out a phased program culminating in a Chrome Quantum-resistant Root…

Cybersecurity researchers disclosed a now-patched Chrome vulnerability (CVE-2026-0628) in the WebView-based Gemini Live side panel that could let malicious extensions escalate privileges and access local files, camera, and microphone. The bug, dubbed Glic Jack, was reported by Palo Alto Networks Unit 42 and fixed by Google in early January 2026. #GlicJack…

An espionage campaign running from January 2025 targeted government agencies and critical infrastructure in Pakistan, Bangladesh and Sri Lanka, using social-engineered emails and 112 Cloudflare domains to stage malicious documents. Arctic Wolf attributed the year-long operation to an India-nexus actor dubbed SloppyLemming, which deployed the BurrowShell backdoor and Excel-based keyloggers to…

The University of Hawaiʻi Cancer Center disclosed a ransomware attack on its epidemiology division that exposed up to 1.2 million records, including SSNs, driver’s license numbers, voter registration data, and some health-related information. Investigations continue after the August 31, 2025 discovery; the university obtained a decryption tool, engaged law enforcement and…

U.S. Cyber Command and U.S. Space Command carried out coordinated cyber and space operations that disrupted Iranian communications and sensor networks to support Operation Epic Fury. The efforts helped enable a joint U.S.-Israeli bombing campaign that reportedly killed Ayatollah Ali Khamenei and other senior Iranian officials, with follow-on hacks and thwarted…

Madison Square Garden confirmed a data breach after the Cl0p extortion group exploited zero-day vulnerabilities in Oracle’s E-Business Suite as part of a campaign that affected more than 100 organizations. Cl0p leaked over 210GB of stolen archive files after MSG declined to pay, and the company says the impacted Oracle EBS…