Evooo1Bot Linux Botnet Uses 16 DDoS Methods and SOCKS5 Proxies to Hijack Edge Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly tracked Linux botnet is turning exposed edge devices into tools for disruption, remote access, and traffic relaying. Evooo1Bot is the threat that reaches internet-facing edge systems by exploiting known flaws and attempting weak SSH logins. …

ChainDrop npm Worm Poisons 444 Packages Through GitHub Actions and Trusted Publishing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 ChainDrop has made an npm package compromise a warning about developer machines. The self-propagating campaign poisoned 444 packages and more than 1,300 malicious releases after attackers took over the GitHub account tied to the Keyv caching library. …

12 KB Windows Backdoor Hides C2 Domain in desktop.ini Whitespace to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly documented Windows backdoor shows how little code an attacker needs to stay hidden. The 12 KB implant was found on one corporate workstation, where it posed as Realtek audio software. Its small footprint differs from Windows …

Safepal Confirm Hackers Gained Access to Customer Order Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 SafePal has confirmed a security incident in which unauthorized parties accessed customer order information through a flaw in an order-tracking plug-in. The company said the incident affected approximately 39,798 customers who placed orders between March 2, 2025 …

Apple Screen Sharing Vulnerability Exploited to Execute Command as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly disclosed logic flaw in macOS Screen Sharing shows how a feature meant only to grant screen-viewing access can be twisted into a path for full root command execution. The issue, tracked as CVE-2026-43760, affects the …

Cyber Security Weekly Newsletter – Outlook RCE, Palo Alto, Cisco 0-day and Windows 0-Day Flaws +20 Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

This week’s roundup covers a record-setting Microsoft Patch Tuesday, an actively exploited Cisco firewall zero-day, a Lazarus-linked Windows kernel bug, and critical flaws across TP-Link, Palo Alto Networks, Fortinet, and VMware — plus a first-of-its-kind autonomous AI agent “hack” and …

Microsoft Begins to Merge Consumer and Enterprise Copilot Apps to Make New Super App

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 Microsoft is moving closer to a unified Copilot experience by merging key elements of its consumer AI assistant with the Microsoft 365 productivity environment. The change positions Copilot as a single application for personal tasks, workplace productivity, …

AWS Certificate Manager to Discontinue Email Validation for Public Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 AWS Certificate Manager to Discontinue Email Validation for Public Certificates AWS Certificate Manager (ACM) has announced plans to permanently discontinue email-based domain control validation (DCV) for public certificate renewals by September 30, 2027. The deprecation aligns AWS …

McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some of the world’s largest corporations. The seller, operating under the alias “TheHatman,” …

Post-Hugging Face Reflections: The Agentic Attacker Is Already Here 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Bill Robbins, CEO of Menlo Security  An AI agent broke out of the sandbox built to contain it and put itself on the open internet. Then it attacked another company. The attack wasn’t executed by a human. Instead, the AI agent …