Category: Cyber Security News

​GitHub Breached! Over 3,800 Internal Repositories Listed on the Dark Web: What You Need to Know

Actively exploited Microsoft Exchange Server Zero-Day (CVE-2026-42897) alert. Get immediate mitigation steps and protect your network with Mister Red

Learn about the critical CVE-2026-20182 authentication bypass vulnerability in Cisco SD-WAN Controllers and how it is being exploited by hackers

Google has released urgent security updates for Chrome to fix CVE-2026-2441, a high-severity zero-day vulnerability actively exploited in the wild. Users are advised to update to the latest browser version immediately.

Clickjacking is rated P5 in bug bounties but becomes a real-world P1 threat when abused to access cameras, permissions, and user privacy.

Germany’s intelligence agencies have warned of sophisticated phishing attacks abusing Signal’s legitimate features to spy on politicians, military officials, diplomats, and journalists across Europe—without using malware.

The Aisuru/Kimwolf botnet launched the largest DDoS attack ever recorded, peaking at 31.4 Tbps. Learn how the “Night Before Christmas” campaign targeted Cloudflare, its impact on global infrastructure, and what it means for cybersecurity.

Cybersecurity researchers have uncovered a fake Moltbot (formerly Clawdbot) Visual Studio Code extension that posed as an AI coding assistant but secretly installed malware, giving attackers persistent remote access. The extension was removed from the official VS Code Marketplace after discovery.

Indian government entities have been targeted by two sophisticated cyber-espionage campaigns, dubbed Gopher Strike and Sheet Attack, attributed to a Pakistan-linked threat actor. The attacks leverage phishing emails, fake Adobe update prompts, and trusted platforms like Google Sheets and GitHub to deploy custom Golang-based malware, enabling persistent access and remote command execution on infected systems.

A 149 million credentials database, including Gmail, Facebook, Instagram, and government accounts, was found exposed in an unprotected cloud repository. Learn how the breach happened, who’s affected, and steps to stay safe.

A newly disclosed critical vulnerability in Zoom Node Multimedia Routers (MMRs) allows authenticated meeting participants to execute arbitrary commands remotely. Tracked as CVE-2026-22844 with a CVSS score of 9.9, the flaw affects Zoom Node deployments running versions prior to 5.2.1716.0 and requires immediate patching.

Security researchers have uncovered a sophisticated Windows malware campaign that relies on social engineering, malicious shortcuts, and abused cloud services like GitHub and Dropbox to bypass Microsoft Defender and deploy ransomware, RATs, and banking trojans without exploiting software vulnerabilities.