Polish Power Plant Breach via Private Cellular Network Shuts Turbine
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power (CHP) plant by breaching…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Cybersecurity researchers have uncovered a supply chain attack targeting WordPress plugin vendor BdThemes, leading to the temporary suspension of several plugins from…
New Passkey Attacks Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
OpenAI Pauses Astra AI Model Activities Over Critical Cyber Capabilities
OpenAI has announced it is pausing certain internal activities involving its upcoming artificial intelligence model, Astra, after an internal evaluation indicated significant…
New CSS Attacks Break Webmail Defenses to Steal Passwords and Tokens
New research presented at Black Hat USA 2026 reveals that CSS and HTML techniques can break out of email message boundaries to…
Atlassian Rovo Flaws Could Exfiltrate Jira and Confluence Data to Attackers
Two security firms have independently discovered that Atlassian's Rovo AI assistant can be tricked into sending sensitive Jira and Confluence data to…
Open Source’s Coming of Age: The Rise of the ‘Subset’ and the New Enterprise Security Bar
Open source software is undergoing a forced maturation, driven by a convergence of threats and regulatory pressures. The article argues that while…
Microsoft 365 AitM Phishing Campaign Hijacks Accounts to Steal Payroll and Finance Emails
Cybersecurity researchers at Arctic Wolf Labs have uncovered a widespread email-driven phishing campaign that uses adversary-in-the-middle (AitM) techniques to compromise Microsoft 365…
NatJack Attacks Exploit NAT State to Hijack TCP Sessions and Spoof DNS
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits network address translation (NAT) connection state to hijack…
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout has identified over 4,400 internet-facing Rockwell Automation programmable logic controllers (PLCs) worldwide, including 22 in cities affected by recent cyberattacks on…