Hackers Poison Google and Bing Results to Deliver Cloaked Banking Phishing Pages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Bank customers searching for a login page can now be led into a trap before they receive a suspicious email or text message. Criminals are manipulating Google and Bing results so that fraudulent banking pages appear where people expect to …

New Mysterious AI Model Dubbed Ox Alpha With Free 100 Trillion Tokens a Day for Coders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A mysterious AI system named Ox Alpha has sparked intense speculation across the developer community after appearing on OpenRouter as a free “stealth model” aimed at coding, long-running AI agents, and production workloads. The identity of its developer remains undisclosed. …

Hackers Impersonate ReliaQuest Security Staff to Steal SSO Credentials and MFA Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ReliaQuest has disclosed a social engineering attack in which threat actors impersonated members of its security team to lure employees to a fraudulent single sign-on page. The incident briefly exposed one employee identity, but ReliaQuest said its layered controls prevented …

768 Leaked Corporate AWS Keys Remain Active With Full Administrator Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new cloud security investigation from Truffle Security has found that 768 publicly exposed AWS credentials still provide full administrative control over corporate AWS environments. The findings highlight a persistent failure in credential rotation, secret management, and cloud account monitoring. …

Kimsuky Uses AI-Generated Chrome Extension to Automatically Steal Gmail Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kimsuky has been linked to a new espionage campaign that turns a Chrome extension into a quiet Gmail collector. The operation begins with convincing phishing emails and ends with attackers gaining access to messages, attachments, and a victim’s computer. Its …

WordPress Plugin Vulnerability Exposes 100,000 Sites to Complete Site Takeover Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability tracked as CVE-2026-19598 in the Everest Forms WordPress plugin has exposed more than 100,000 websites to complete site takeover attacks. The flaw has a CVSS severity score of 9.8. It can allow unauthenticated attackers to upload malicious …

Microsoft Teams Phishing Deploys New SynkLoader Malware to Steal Windows Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Teams phishing is again being used as a doorway to deliver a malware family called SynkLoader. The campaign relies on a familiar social-engineering trick: an attacker poses as an IT helpdesk worker and persuades an employee to install what …

Microsoft August 2026 Windows Updates Trigger Issues on Devices Using RGB Lighting Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is investigating a Windows 11 issue in which the August 2026 security updates can cause certain games to freeze, crash, display access-violation errors, or restart affected PCs. The problem appears to be linked to RGB lighting hardware and software …

AmnesiaStealer Gives Hackers Hidden Control of Logged-In Browsers on Macs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AmnesiaStealer is a newly identified macOS information stealer that does more than copy saved passwords. It can give criminals quiet control of a browser that is already signed in, turning an infected Mac into a gateway to email, business apps, …

Fake CAPTCHA Tricks Mac Users Into Installing a Backdoor That Steals Passwords and Mines Crypto

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mac users are being lured into a ClickFix campaign that turns a routine CAPTCHA check into a path for password theft, remote control, and cryptocurrency mining. It persuades a visitor to run an attackers’ command in Terminal rather than download …