Cursor, a popular AI-powered coding editor, has been found to contain a serious security flaw that could allow attackers to run malicious code on Windows computers. The issue is triggered when a developer opens or clones a specially crafted repository. Security researchers warned that the attack requires very little user interaction, making it a significant … Continued
Welcome to the June 2026 edition of the CyberSecurity88 Magazine, dedicated to celebrating Women in Cybersecurity. This special issue highlights the achievements, expertise, and impact of women who are shaping the future of cybersecurity. Explore the interactive magazine below and discover the voices driving innovation, resilience, and excellence across the cybersecurity community. Happy reading!
SAP has released new security updates to fix several serious vulnerabilities affecting its enterprise software products. As part of its latest Security Patch Day, the company addressed 16 security issues, including three critical vulnerabilities in SAP NetWeaver, SAP Commerce Cloud, and SAP AppRouter. These flaws could expose organizations to serious security risks if they are … Continued
A new cybersecurity investigation has uncovered a large campaign involving 148 malicious npm packages that pretended to be harmless student web proxy tools. Security researchers at JFrog found that these packages were not designed to attack developers who downloaded them. Instead, they targeted students and other users who opened the proxy websites, secretly turning their … Continued
The United States and several international cybersecurity agencies have issued a new joint warning about ongoing cyber threats linked to Russian intelligence services. The advisory says these threat actors are actively targeting critical infrastructure organizations by exploiting vulnerable and poorly secured network devices. Officials are urging organizations to strengthen their cyber defenses immediately to reduce … Continued
A serious cybersecurity issue has been discovered in two popular Joomla extensions, iCagenda and Balbooa Forms. Security researchers confirmed that both vulnerabilities were being actively exploited by attackers before official fixes were released, making them true zero-day vulnerabilities. Because these extensions are widely used on Joomla websites, thousands of websites could have been exposed to … Continued
A new cybersecurity study has raised serious concerns about the security of many free Android VPN apps available on the Google Play Store. Researchers developed a testing framework called MVPNalyzer to examine how these apps actually handle user traffic and privacy. After analyzing 281 popular Android VPN apps, they found that many failed to provide … Continued
Security researchers have uncovered a new remote access trojan (RAT) called MODBEACON, a highly modular malware believed to be used by a Silver Fox-linked Ghost malware distributor. The malware was discovered during investigations into targeted attacks against organizations in Asia. Unlike common malware that spreads widely, MODBEACON appears to be deployed only against selected victims, … Continued
Police agencies from around the world have carried out one of the biggest anti-fraud operations ever, leading to the arrest of more than 5,800 suspects involved in cyber-enabled financial crimes. The coordinated crackdown targeted criminal networks operating across multiple countries and focused on disrupting large-scale fraud activities. Authorities also seized large amounts of illegal assets … Continued
Cybersecurity researchers have discovered a new ransomware operation called GodDamn that uses an advanced technique to disable security software before encrypting files. According to researchers, this ransomware is not entirely new but is believed to be the latest version of the Beast ransomware family, which itself evolved from the Monster ransomware first seen in 2022. … Continued
