GitHub Outage Disrupts Developers Worldwide Amid Ongoing Investigation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 GitHub, the world’s largest code-hosting platform, is grappling with a significant service disruption that began around 13:40 UTC on August 17, 2026, leaving developers, enterprises, and DevOps teams scrambling as core services including Pull Requests, Issues, Actions, …

Top 10 Best Software-Defined Perimeter (SDP) Solutions in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 Best Software-Defined Perimeter (SDP) Solutions A software-defined perimeter makes your infrastructure invisible: resources accept no unauthenticated connections, so attackers cannot scan, probe, or exploit what they cannot see. Zscaler leads at enterprise scale, Appgate remains the purest …

Threema Secure Messaging Service Hit by Massive DDoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 Threema, a privacy-focused secure messaging service, was hit by a series of large-scale distributed denial-of-service (DDoS attacks) that temporarily disrupted access for users. The incidents affected the platform on Tuesday evening and continued intermittently through Wednesday morning …

Microsoft SCCM Vulnerability Chained to Execute Malicious Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 Security researchers have disclosed a serious attack chain affecting Microsoft System Center Configuration Manager, commonly known as SCCM or Configuration Manager. The flaws could allow an attacker to execute malicious code remotely on an SCCM primary site …

Roundcube 1.6.18 and 1.7.3 Released With Fix for RCE and SSRF Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 Roundcube has released versions 1.6.18 and 1.7.3 to address eleven security vulnerabilities affecting its webmail platform. The updates fix a remote code execution flaw, server-side request forgery bypasses, injection vulnerabilities, and stored cross-site scripting issues. Administrators using …

HoneyMyte CoolClient Backdoor Uses Signed Kernel Rootkit to Hide Processes, Files and C2 Traffic

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 HoneyMyte has upgraded its CoolClient backdoor with a kernel-level rootkit for Windows. The change makes routine investigation much harder for defenders. It gives intruders tools designed to survive ordinary security checks. The activity targeted organizations in Pakistan, …

GeoServer’s Unauthenticated SQL injection Vulnerability Enables RCE Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GeoServer administrators should urgently update affected systems after researchers disclosed an unauthenticated SQL injection flaw in the jsonArrayContains filter function. The issue can allow attackers to manipulate database queries via publicly accessible OGC WMS and WFS services and, under dangerous …

Z.ai Unveils GLM-5.3 with Major Enhancements for Coding and Cybersecurity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Z.ai has released GLM-5.3, a new AI model built to handle complex coding, long-running agent tasks, and cybersecurity analysis. The company says the model uses the same base model as GLM-5.2, with improvements coming entirely from larger-scale post-training. The release …

New MessiahGPT AI Model Fueling Automated Ransomware and Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A criminal AI service called MessiahGPT is being marketed on BreachForums as an uncensored platform for creating ransomware, phishing kits, stealers, crypters, rootkits, and social-engineering content. Trellix researchers describe it as part of a growing underground market …

Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 Fake job interviews are again being used to breach cryptocurrency teams. In a documented case, a convincing Web3 recruitment process led a Windows user to install malware that stole private keys, browser data, and other sensitive information. …