Microsoft Word Copilot Vulnerability Turns Hidden Prompts Into Self‑Propagating AI Worms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 A new vulnerability in Microsoft Copilot for Word shows how hidden prompts inside documents can transform routine editing into a self‑propagating “AI worm” that tampers with business content and then quietly spreads itself to new files. The …

Critical Rails Flaw Lets Attackers Read Arbitrary Files and Execute Malicious Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe security vulnerability in Ruby on Rails Active Storage tracked as CVE-2026-66066 can let unauthenticated attackers read sensitive files from a server and potentially escalate to remote code execution. The issue affects applications that use libvips for image variant …

AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where attackers can hijack active sessions, bypass multi-factor authentication (MFA), and evade conventional endpoint security controls. This emerging threat model is forcing …

NVIDIA BlueField Vulnerability Enables Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affected systems if successfully exploited. This vulnerability, tracked as CVE-2026-65094, impacts the VIRTIO-Net component and …

Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. Assigned a maximum CVSS base score of 10.0, the vulnerability …

Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with access to sensitive conversations, including officials, military personnel, political figures, journalists, …

Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used …

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further …

Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Hackers Can Compromise Your Tor Browser if You Visit a Single Malicious Page A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The flaw, a …

Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found no evidence of a new breach at this time. A threat …