Cybersecurity Articles
459/69 Monday, August 24, 2026 Security researchers have disclosed ToxicPanda 2.0, an Android malware strain that has added the ability to request VPN Service permissions to create a local interface for controlling network traffic on infected devices. This feature allows the malware to block communications from Google Play and Google Play Services, potentially interfering with […]
458/69 Monday, August 24, 2026 Researchers from Kaspersky have published a report on Android malware targeting car head units, or infotainment systems and certain control components in vehicles. They described it as the first documented case of malware infection on a car head unit through an update mechanism specific to this type of device. The […]
457/69 Monday, August 24, 2026 Leading hardware and processor chip manufacturers are accelerating the development of security capabilities by integrating post-quantum cryptography (PQC) into hardware to prepare for future cyber threats. Although quantum computers capable of breaking today’s cryptographic algorithms are still expected to take several years before reaching broad commercial availability, cybersecurity experts remain […]
456/69 Friday, August 21, 2026 CERT Polska has warned that CVE-2026-73570 in Zimbra Collaboration Suite (ZCS) is being exploited in attacks. The vulnerability was fixed in Zimbra version 10.1.20, released on July 20, 2026. The flaw is a command injection vulnerability in the SNMP Monitoring component and could allow unauthenticated attackers to execute commands on […]
455/69 Friday, August 21, 2026 Researchers from threat intelligence company Hunt.io have disclosed a large-scale attack campaign named CameraSwarm, in which hackers compromised more than 14,500 Dahua IP cameras, most of them located in Ukraine and Russia. The campaign operated for at least 35 days, from June 17 to July 22, 2026, using multiple attack […]
454/69 Friday, August 21, 2026 CareCloud, a U.S.-based healthcare information technology provider that manages electronic health record systems and medical data management services, has disclosed a data breach affecting more than 3.7 million patients. The incident is particularly significant because the company’s systems store personal information and may include sensitive health data. The exposure could […]
453/69 Thursday, August 20, 2026 CISA disclosed that CVE-2025-60710, a vulnerability in Host Process for Windows Tasks, has been exploited in attacks by ransomware groups. CISA previously added the vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog in April 2026 after confirming evidence of active exploitation. The flaw is a Windows privilege escalation vulnerability, and […]
452/69 Thursday, August 20, 2026 GitLab has released patches to fix a Critical vulnerability, CVE-2026-19478, with a CVSS score of 9.4. The vulnerability could allow unauthenticated attackers to modify or delete public projects and user data through GraphQL directives under certain conditions. The flaw affects only self-managed installations. GitLab recommends that administrators update to versions […]
451/69 Thursday, August 20, 2026 Cybersecurity experts have identified a shift in ransomware-related threats, with the emergence of a group calling itself Ransom Busters. The group sends emails to organizations that have already fallen victim to ransomware attacks, claiming that it can breach the attackers’ servers and help delete the stolen data in exchange for […]
450/69 Wednesday, August 19, 2026 Security researchers have disclosed a Critical vulnerability, CVE-2026-15748, in the Forminator Forms plugin for WordPress, which is installed on more than 600,000 websites. The vulnerability has a CVSS severity score of 9.8 and could allow unauthenticated attackers to upload malicious files, including PHP files, to affected websites, potentially leading to […]
