Critical Cisco Unified CM Flaw Exposes Systems to Root-Level Takeover After PoC Release

Cisco has released security updates for a critical vulnerability affecting its Unified Communications Manager (Unified CM) platform. The flaw, tracked as CVE-2026-20230, can allow a remote attacker to gain root-level privileges on affected systems. Security researchers and Cisco have confirmed that proof-of-concept (PoC) exploit code is publicly available, increasing the urgency for organizations to apply … Continued

UK Museums at Risk: MPs Warn of Growing Cybersecurity Threats

UK lawmakers have raised concerns that many museums and galleries across the country are still vulnerable to cyberattacks and security breaches. A recent parliamentary report said valuable collections and sensitive information could be at risk if stronger digital protections are not put in place. The warning comes as cultural institutions continue to rely heavily on … Continued

GTA 6 Pre-Order Scams Surge as Cybercriminals Target Excited Gamers

The excitement around Grand Theft Auto VI (GTA 6) has reached a new level after Rockstar Games confirmed that pre-orders will open on June 25, 2026. However, cybersecurity experts and gaming communities are warning that scammers are already taking advantage of the hype. Fake pre-order websites, fraudulent beta invitations, and phishing campaigns have started appearing … Continued

Scattered Spider Teens Admit Role in £39 Million TfL Cyber Attack

Two young members linked to the notorious Scattered Spider cybercrime group have admitted their role in the major cyber-attack that targeted Transport for London (TfL) in 2024. The case has drawn significant attention because the attack disrupted services used by millions of passengers and caused financial losses estimated at around £39 million. Authorities described the … Continued

How World Cup Password Trends Could Open the Door to Active Directory Attacks

As the 2026 FIFA World Cup captures global attention, cybersecurity experts are warning that major sporting events can create unexpected security risks inside organizations. Researchers analyzing billions of compromised passwords found that many users choose passwords based on favorite football players, teams, tournaments, and trending sports topics. While these passwords may appear unique, they often … Continued

Fake PostCSS npm Packages Deliver Windows RAT in New Supply Chain Attack

Cybersecurity researchers have uncovered a new malware campaign in which attackers uploaded malicious npm packages disguised as legitimate PostCSS-related development tools. PostCSS is widely used by web developers for processing CSS, making it a trusted part of many software projects. By pretending to be useful development packages, the attackers attempted to trick developers into installing … Continued

WhatsApp Fake Documents Install Remote Access Tool in New Malware Campaign

Cybersecurity researchers have discovered an active malware campaign that uses WhatsApp messages to spread malicious VBScript files. According to findings from Kaspersky, the attackers are targeting users of both WhatsApp Desktop and WhatsApp Web. Victims have been identified in several countries, including India, Malaysia, Brazil, Mexico, Singapore, the United Kingdom, Spain, Taiwan, Australia, Russia, and … Continued

OpenAI’s GPT-5.5-Cyber Is Built to Do What Security Teams Need Most: Fix Vulnerabilities Faster

OpenAI has expanded its Daybreak cybersecurity initiative with a stronger version of GPT-5.5-Cyber, aiming to help security teams not only find software vulnerabilities but also fix them faster. The company says the cybersecurity industry has become very good at discovering flaws, but organizations still struggle to patch them quickly. Daybreak is designed to close that … Continued

Klue Breach Exposes OAuth Tokens, Leading to Attacks on Cybersecurity Firms

A recent security incident involving Klue, a competitive intelligence platform used by many organizations, has raised serious concerns across the cybersecurity industry. The breach allowed attackers to gain unauthorized access to Klue’s integration infrastructure and steal OAuth tokens that customers used to connect their business applications. Security researchers say the attack eventually led to data … Continued

Newsletter line