Microsoft Mitigates Three Serious Azure Vulnerabilities Affecting Cosmos DB, AI Language and Azure AD B2C

Cybersecurity | 06 September 2026

Microsoft has addressed three significant security vulnerabilities affecting several Azure services, including Azure Cosmos DB, Azure AI Language Authoring and Microsoft Azure Active Directory B2C. The flaws range from authorization bypass and spoofi...

Fire Ant Cyber Espionage Campaign Turns Cisco Routers Into Covert Network Surveillance Points

Cybersecurity | 06 September 2026

Routers normally sit quietly in the background, directing traffic between systems and networks without attracting much attention. That makes them incredibly useful to defenders—but also extremely valuable to attackers. A sophisticated cyber espionage...

Google Chrome Zero-Day Under Active Attack: Why Users and IT Teams Should Update Immediately

Cybersecurity | 05 September 2026

Google has released an urgent Chrome security update after confirming that a newly disclosed vulnerability is already being exploited in real-world attacks. The flaw, identified as CVE-2026-85046, affects Chrome's V8 JavaScript and WebAssembly engine...

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw That Could Let Replication Accounts Execute Code

Cybersecurity | 05 September 2026

PostgreSQL has patched a long-standing security vulnerability in its logical decoding functionality that could allow an account with the REPLICATION attribute to execute arbitrary code under the operating-system account running the database server. T...

Invisible Unicode Is Helping Phishing Emails Slip Past Filters — and Microsoft Says the Campaign Has Reached Millions

Cybersecurity | 05 September 2026

Phishing has always depended on deception, but attackers are increasingly experimenting with techniques that were once discussed mainly in the context of artificial intelligence. Microsoft is now warning about a large-scale campaign that uses invisib...

Visa Expands Open-Source VVAH Tool to Help Security Teams Move From Vulnerability Discovery to Remediation

Cybersecurity | 02 September 2026

Artificial intelligence is changing cybersecurity on both sides of the battlefield. Attackers can now identify weaknesses, test potential exploits and automate parts of an attack far more quickly than before. For defenders, that means simply discover...

Chrome 152 Fixes Hundreds of Security Flaws, Including Multiple Critical Bugs

Cybersecurity | 29 August 2026

Google has released a major security update for Chrome 152, addressing more than 300 vulnerabilities, including over 10 issues classified as critical and capable of affecting both individual users and enterprise environments.

CISA Warns of Active Exploitation of Microsoft SQL Server RCE Flaw

Cybersecurity | 29 August 2026

A years-old Microsoft SQL Server vulnerability has returned to the spotlight after the US Cybersecurity and Infrastructure Security Agency (CISA) added it to its Known Exploited Vulnerabilities (KEV) catalog, confirming that attackers are now activel...

Chinese-Made Routers Sold Globally Reportedly Contain Hidden Backdoors

Cybersecurity | 28 August 2026

Security researchers have raised serious concerns about routers manufactured by Shenzhen Zhibotong Electronics Co. Ltd. (ZBT) after discovering several hidden remote-access mechanisms inside firmware used across multiple devices.

WordPress Sites Targeted in miniOrange SAML Authentication Bypass Attacks

Cybersecurity | 26 August 2026

WordPress administrators using the miniOrange SAML 2.0 Single Sign On plugin are being urged to update immediately after researchers observed hackers actively attempting to exploit two critical vulnerabilities that can be combined to bypass authentic...

Russian Hackers Abuse Trusted Google and WhatsApp Tools in New Social Engineering Attacks

Cybersecurity | 26 August 2026

Cybercriminals do not always need convincing fake login pages anymore. Increasingly, attackers are finding that it can be more effective to place legitimate authentication services inside a fraudulent workflow, making attacks far more difficult for v...

CISA Gives Agencies Just Three Days to Patch Critical Oracle Flaw

Cybersecurity | 26 August 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued one of its most urgent patching deadlines for a newly confirmed exploited vulnerability affecting Oracle products. Tracked as CVE-2026-21962, the flaw carries the maximum possi...

AnMed Confirms Patient Data Breach After Ransomware Attack

Cybersecurity | 25 August 2026

AnMed has confirmed that patient health information was compromised during the cyberattack that disrupted the South Carolina healthcare system in late July. In a new video statement, AnMed CEO William Kinley acknowledged that cybercriminals gained ac...

Malaysia Launches New AI Cybersecurity Research Center

Cybersecurity | 25 August 2026

Malaysia is strengthening its position in the artificial intelligence and cybersecurity space with the establishment of a new AI Cybersecurity Research Center in Kuala Lumpur. The initiative follows a cooperation agreement between the Global Cybersec...

Hackers Target Siemens PLCs in U.S. Critical Infrastructure

Cybersecurity | 24 August 2026

U.S. authorities are warning that hackers linked to Iran are actively targeting Siemens S7-series programmable logic controllers (PLCs) used across water systems, energy facilities, manufacturing plants and other critical infrastructure.

Z.ai GLM-5.3 Takes Top Spot in CyberGym Cybersecurity AI Benchmark

Cybersecurity | 23 August 2026

Chinese AI developer Z.ai has released GLM-5.3, with the model achieving an 84.5% score on the CyberGym cybersecurity benchmark and narrowly taking the lead over competing frontier models. According to Z.ai's published results, Anthropic's Mythos 5 p...

Brave Says AliExpress Used Audio Fingerprinting to Track Users Without Cookies

Cybersecurity | 23 August 2026

Online tracking is becoming increasingly sophisticated, and cookies are no longer the only way websites can recognise visitors. Privacy-focused browser Brave has now accused Alibaba-owned AliExpress of using the Web Audio API as part of a device-fing...

Microsoft HPC Pack Vulnerability Could Allow Remote Code Execution Over the Network

Cybersecurity | 19 August 2026

Microsoft has released an urgent security update addressing a serious vulnerability in Microsoft High Performance Computing (HPC) Pack 2019 that could allow attackers to execute malicious code remotely.

Windows Defender Flagged OpenAI Codex as a Trojan — But It Appears to Be a False Positive

Cybersecurity | 18 August 2026

While working on one of my local development projects using OpenAI Codex Desktop, I suddenly received a rather alarming Windows Security notification.

No, AI Isn’t “Going Rogue” — It’s Usually Following the Wrong Instructions Too Well

Cybersecurity | 18 August 2026

Whenever an AI system behaves in an unexpected or alarming way, the same phrase tends to appear: the AI went rogue. It is an understandable reaction. Modern AI systems can communicate naturally, use software tools, browse information, write code and...