Category: Cyber Security News

TigerByte Cyber has emerged from stealth with $3 million in seed funding to expand its edge and AI device security platform, Cyber Protection Suite (CPS). The company says it will use the funding to modernize mission-critical systems for military and commercial aircraft, drones, satellites, and vehicles, building on more than $7…

WaterPlum, a North Korean hacking group, compromised at least 30,000 devices in more than 100 countries and sent over $10.7 million in stolen cryptocurrency to North Korea. The campaign used fake interviews, malicious coding tests, and recruiter impersonation to spread malware and steal credentials, wallet data, and identity documents. #WaterPlum #ContagiousInterview #BeaverTail #InvisibleFerret #OtterCookie #OtterCandy #StoatWaffle #DPRK

SolarWinds has patched a high-severity vulnerability in Access Rights Manager, tracked as CVE-2026-28326, that could allow unauthenticated remote code execution due to a hard-coded static key. The company also released fixes for serious flaws in Web Help Desk and multiple Serv-U issues, including risks of privilege escalation, remote code execution, and…

Hacktron researchers used Claude Opus 5 to chain a Discourse image bug and an OpenAI login weakness, briefly taking over ChatGPT and Codex accounts belonging to OpenAI employees and reaching an internal code repository. OpenAI fixed the issue quickly and paid a bounty, while the underlying HEIF/HEIC flaw was tied to…

North Korean hackers linked to WaterPlum, also known as Contagious Interview, are posing as AI companies and other employers to target job seekers, especially software developers and IT professionals. The campaign has infected more than 30,000 devices worldwide and helped move nearly $11 million in cryptocurrency to North Korea through stolen credentials and fake recruiting schemes. #WaterPlum #ContagiousInterview #NorthKorea #FBI

Researchers used Anthropic’s Claude and OpenAI’s Codex to uncover HEIF Heist, a flaw in popular image decoding libraries that could expose sensitive data and enable remote access across major platforms. They warned that vulnerable deployments of libheif and libde265 could put OpenAI, AWS, Meta, GitHub Enterprise, and Discourse systems at risk if patches are not applied. #HEIFHeist #libheif #libde265 #OpenAI #AWS #Meta #GitHubEnterprise #Discourse

Ahmed Hossam Eldin Elbadawy, a core member of Scattered Spider, pleaded guilty to wire fraud conspiracy and aggravated identity theft in connection with extortion attacks from 2021 to 2023. Prosecutors say he and his co-conspirators stole company credentials and virtual currency from victims across entertainment, telecom, technology, cloud, IT, and virtual currency sectors. #ScatteredSpider #AhmedHossamEldinElbadawy #NoahMichaelUrban #TylerRobertBuchanan

A malware campaign is using SEO-optimized GitHub repositories to impersonate LastPass and dozens of other software firms in order to distribute the newly observed Rapuncel information stealer. The chain also installs the Alinubx.sys kernel driver, which is signed through Microsoft and can terminate 145 antivirus and EDR products while stealing credentials, browser data, and wallet information. #LastPass #DelphosLabs #Rapuncel #Alinubxsys #Microsoft

Gyazo confirmed a data breach after attackers exploited a server vulnerability and stole approximately 23.62 million user records, prompting the company to take the service offline for maintenance. The incident also exposed 490 million image metadata records, including details that could potentially help access private images, and users are being urged to change passwords and watch for suspicious activity. #Gyazo #Helpfeel

Transparent Tribe (APT36/Earth Karkaddan) has launched Operation RapidRust against government and defense entities in India and Afghanistan using newly identified tools and typosquatted domains. The campaign relies on private GitHub repositories, Rust-based backdoors, and cross-platform stealers to support stealthy command-and-control, data theft, and USB-based propagation. #TransparentTribe #APT36 #EarthKarkaddan #OperationRapidRust #RUSTYSHADE #RUSTYMOVE…

WordPress released security patches in version 7.1.1 to fix a core flaw that could let a logged-in administrator be tricked into automatically installing a theme from WordPress.org through a crafted link. Researchers at pwn.ai named the attack chain Click2Shell and showed it could be paired with a separate theme flaw, such…

A security researcher published working exploit code for four Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—that can let a local attacker gain root on unpatched systems. The bugs have already been fixed in the Linux kernel, but older kernels remain at risk until they are updated, especially on systems using unprivileged…

Microsoft has fixed a known issue that caused Windows Security to wrongly report that Microsoft Defender Antivirus was turned off after recent updates. The bug affected supported Windows client and server versions, including Windows 11 26H1 and Windows Server 2025, and was resolved in Defender Antivirus update version 4.18.26080.4 released on September 17. #MicrosoftDefenderAntivirus #WindowsSecurity #Windows11 #WindowsServer2025

BleepingComputer and Material Security will host a live webinar on September 23, 2026 to examine real Google Workspace breaches and identify the controls that matter most for fast-growing companies. The session will focus on attacks that used social engineering and malicious OAuth applications, plus practical response lessons from the first hours after compromise. #GoogleWorkspace #MaterialSecurity #RajanKapoor #RickFitzgerald #BleepingComputer #OAuthApplications