JFrog Artifactory users are facing a serious security problem after attackers were observed exploiting a newly disclosed critical vulnerability in the platform. The flaw is tracked as CVE-2026-82329 and carries a CVSS score of 9.8, making it a critical-level issue. JFrog says the vulnerability is an authentication weakness that, under the default configuration, can allow … Continued
A new cyberattack campaign called Spring Ring is targeting Microsoft Teams users through voice phishing, also known as vishing. Researchers from Palo Alto Networks found that the campaign targeted at least 150 employees across multiple companies between January and April 2026. The attacks affected employees from at least 10 organizations and were designed to trick … Continued
Security researchers have uncovered 13 malicious Composer theme packages on Packagist that are being used to target visitors of Vietnamese movie and comic streaming websites. The packages inject harmful JavaScript into websites that install them and can expose visitors to both advertising redirects and a serious iPhone spyware attack. The campaign mainly affects sites using … Continued
Novocure, a company that works in cancer treatment, has confirmed that a cybersecurity incident exposed information connected to more than 1,400 U.S. patient records. The unauthorized access was discovered in mid-August 2026 after someone gained access to some of the company’s information systems. Novocure said it immediately activated its cybersecurity response plan, took steps to … Continued
A China-linked cyber espionage group known as Fire Ant has expanded its operations by targeting trusted network infrastructure instead of focusing only on individual computers. According to cybersecurity firm Sygnia, the group compromised Cisco IOS XR routers, TACACS authentication servers and Linux management systems used to connect and manage high-value environments. The activity represents an … Continued
Two Nigerian men have been extradited to the United States to face federal charges over separate financially motivated sextortion cases involving American teenagers who later died by suicide. The U.S. Department of Justice identified the men as 26-year-old Adebola Festus Adekunle of Lagos and 24-year-old Mudasiru Afeez Olawale. Both men were arrested in Nigeria in … Continued
Australian authorities have arrested two young men accused of being principal participants in TeamPCP, a cybercrime syndicate linked to a major series of software supply-chain attacks. The suspects, Ruben Ian Thomson, 21, and Louis Michael Gaebler, 23, were arrested in Perth, Western Australia, after a joint investigation involving the Australian Federal Police, Western Australia Police … Continued
Amazon Kiro, an AI-powered development environment, has been found vulnerable to a prompt injection attack that could allow sensitive local data to be sent to an external server. Researchers at Mindgard discovered the issue in Kiro IDE version 0.7.45 on Windows. The vulnerability did not have a CVE identifier at the time of reporting. Amazon … Continued
Microsoft SharePoint servers are facing fresh attack activity after researchers disclosed proof-of-concept exploits for two vulnerabilities. The flaws can be chained together to bypass authentication and potentially achieve remote code execution. CVE-2026-55040 allows attackers to bypass SharePoint’s JWT authentication process. CVE-2026-63520 can then be used to execute arbitrary code on affected servers. CVE-2026-55040 is a … Continued
A new phishing toolkit called NovaCookies is being used by cybercriminals to steal Microsoft 365 sessions through advanced phishing attacks. Security researchers found that the service acts as a proxy between victims and legitimate Microsoft login pages. It can capture authenticated sessions after victims enter their passwords and complete MFA. The campaign has targeted organizations … Continued
