Check Point Authentication Bypass Flaw Enables Full Compromise of Security Management System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 4, 2026 Check Point has released security updates for a high-severity authentication-bypass vulnerability (CVE-2026-18574) that could allow attackers to compromise vulnerable Security Management environments fully. This issue affects both Security Management Server and Multi-Domain Security Management Server deployments across …

Telegram App Reportedly Vanished from Apple’s App Store Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Telegram Messenger briefly disappeared from Apple’s App Store across multiple countries late Monday, sparking a wave of confusion and speculation on social media before the app was restored a short while later. Screenshots flooded platforms like X, showing users encountering …

Malware Can Steal Your Google Synced Passkey Without Asking for Your Password or Fingerprint

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 New research reveals that malware already sitting on a compromised Windows PC can hijack Google’s synced passkeys and take over accounts without ever prompting the victim for a password, PIN, or fingerprint. The findings, detailed in the …

DNA Test Software Vulnerability Allows Attackers to Alter Analysis Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 Thermo Fisher Scientific has disclosed a high-severity security flaw affecting several of its Applied Biosystems Human Identification (HID) software products, warning that attackers could make nearly undetectable modifications to forensic DNA analysis files before they are processed. …

Public PoC Released for Critical Rails Active Storage RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 A critical vulnerability in Ruby on Rails has raised new concerns about cloud data breaches, particularly for companies that host customer platforms in Amazon Web Services (AWS). Known as CVE-2026-66066 or KindaRails2Shell, this flaw affects Active Storage …

Hugging Face Diffusers Vulnerabilities Enable Remote Code Execution Through Malicious AI Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A set of high-severity vulnerabilities in Hugging Face’s diffusers library that allow a malicious model repository to silently execute arbitrary code on any machine that loads it. The flaws bypass trust_remote_code, the very safeguard designed to stop unreviewed code from …

TP-Link TL-WR940N Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TP-Link has issued a security advisory regarding a high-severity vulnerability affecting its TL-WR940N V6 wireless router. This vulnerability, tracked as CVE-2026-12935, could allow unauthenticated attackers to trigger a denial-of-service condition or achieve remote code execution on vulnerable devices under certain …

Hackers Exploit VeloCloud Orchestrator Command Injection Vulnerability in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 Security researchers have issued a warning about a critical command injection vulnerability that is being actively exploited in on-premises VeloCloud Orchestrator (VCO) deployments. This vulnerability, tracked as CVE-2026-16812, allows remote attackers to access privileged internal functions and …

Android RAT Survives Reboots Using Watchdog Services and Boot Receivers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 Android users are facing a new remote-access threat that hides behind a fake emergency alert application. The malware, called Octagon, poses as Bahrain’s BH Alert service and leads victims through a convincing setup process designed to win …

ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ModernStealer is the name behind underground posts claiming to offer military, government, nuclear, and aerospace material. The posts appeared on dark web forums and Telegram, making a single alias a concern for public-sector and defence teams. The activity is not …