New CSS Attacks Break Webmail Defenses to Steal Passwords and Tokens
New research presented at Black Hat USA 2026 reveals that CSS and HTML techniques can break out of email message boundaries to…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
Atlassian Rovo Flaws Could Exfiltrate Jira and Confluence Data to Attackers
Two security firms have independently discovered that Atlassian's Rovo AI assistant can be tricked into sending sensitive Jira and Confluence data to…
Open Source’s Coming of Age: The Rise of the ‘Subset’ and the New Enterprise Security Bar
Open source software is undergoing a forced maturation, driven by a convergence of threats and regulatory pressures. The article argues that while…
Microsoft 365 AitM Phishing Campaign Hijacks Accounts to Steal Payroll and Finance Emails
Cybersecurity researchers at Arctic Wolf Labs have uncovered a widespread email-driven phishing campaign that uses adversary-in-the-middle (AitM) techniques to compromise Microsoft 365…
NatJack Attacks Exploit NAT State to Hijack TCP Sessions and Spoof DNS
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits network address translation (NAT) connection state to hijack…
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout has identified over 4,400 internet-facing Rockwell Automation programmable logic controllers (PLCs) worldwide, including 22 in cities affected by recent cyberattacks on…
AI Recommendation Poisoning: How ‘Ask AI’ Buttons Silently Alter LLM Memory
A new class of prompt injection attack, dubbed "AI Recommendation Poisoning," is spreading across commercial websites. It exploits pre-filled deep links in…
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
Ransom Cartel Creator Sentenced to 16 Years in Prison for Ransomware-as-a-Service Operation
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau, a 40-year-old Belarusian national, to 16 years in prison on August 5, 2026,…