CYBER ATTACK

A malware attack is targeting Roblox players with a deceptive version of the Xeno script executor tool This article explores theft stage malware. . The.

A significant vulnerability in Gitea, identified as CVE-2026-59774, enables unauthenticated remote attackers to read arbitrary files on affected servers.

Check Point has issued a high-severity security alert for CVE-2026-18574, a management authentication-bypass flaw that can allow an unauthenticated.

CISA has issued a warning that cybercriminals are actively exploiting a critical authentication bypass flaw in N-able's N-central system. This.

A Chinese threat operator has spread a DarkSword iOS exploit kit across 180 websites, based on infrastructure scanning data. The operation involves.

A compromised server linked to a Russia-nexus threat actor has revealed a massive initial access operation targeting organizations worldwide This article.

Discover how Thermo Fisher Scientific has released security patches for a high-severity vulnerability impacting Applied Biosystems’ DNA-analysis.

Telegram briefly vanished from Apple's App Store across several countries late Monday, causing confusion and speculation on social media before the app.

Researchers have linked Guangdong Chanming Technology Co., Ltd., a little-known Chinese cybersecurity vendor, to RedRelay, an alleged covert relay network.

Security researchers have identified BINDCLOAK, a new modular Windows backdoor linked to an East Asia-connected threat actor targeting government.

Research has found that malware already on a hacked Windows PC can steal Google’s synced passkeys and access the account without the victim having to.

The CaptiveCrunch campaign has been underway since May 2026. The attackers manipulate DNS and web traffic on captive portals used by networks with hotel.

Complex supply-chain attack delivers malicious packages to Alibaba Group developers posing as internal tools. The operation lasted more than three months.

Researchers have discovered a new npm malware technique linked to the DPRK that conceals command-and-control (C2) infrastructure within generic Ethereum.

A publicly available vulnerability has been disclosed in cPanel & WHM This article explores cpanel credentials exploited. . This vulnerability allows.

Security updates have been released by Check Point to fix a high severity authentication-bypass vulnerability affecting Security Management Server and.

TP-Link has issued a security alert concerning a high-severity vulnerability affecting its TL-WR940N V6 wireless router This article explores connection.

A significant vulnerability in Ruby on Rails has sparked new worries about cloud data breaches, especially for companies that host customer platforms on.

Discover how Thermo Fisher Scientific has disclosed a high-severity security flaw impacting several Applied Biosystems Human Identification software.

Welcome to this edition of the ZeroOwl weekly cybersecurity newsletter — your cybersecurity bulletin covering the 50 most important stories from July 27.

OpenAI’s CEO, Sam Altman, announced that artificial intelligence has reached the long-discussed singularity stage, where AI systems begin improving.

ModernStealer operates on the dark web, posing as legitimate sellers of military, government, nuclear, and aerospace information This article explores.

Following recent vulnerabilities exploited by attackers, SonicWall Secure Mobile Access appliances are now at risk of being controlled without.

A set of high-severity vulnerabilities in Hugging Face’s diffusers library enables malicious model repositories to silently execute arbitrary code on any.

Security researchers have issued a warning about a critical command injection vulnerability being actively exploited in on-premises VeloCloud Orchestrator.

Since the first quarter of 2026, researchers at XLab have been monitoring an IoT botnet family known as Dysphoria This article explores detected fbot.

A newly disclosed vulnerability in TP-Link's TL-WR940N router allows unauthenticated attackers to execute remote code, putting millions of home and.

N-able has identified an active exploit targeting its N-central RMM platform, which provides unauthenticated administrative access to console MSPs.

A firmware entropy flaw in Coinkite's Coldcard hardware wallet enabled an attacker to drain 1,196 Bitcoin addresses of approximately $70 million worth of.

The pause in Phase II of the Cybersecurity Maturity Model Certification (CMMC) program has caused a ripple effect throughout the Defense Industrial Base.