Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026)

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) Global phishing-as-a-service (PhaaS) activity surged to 7,295 tracked uploads during the week of July 20-26, 2026, driven overwhelmingly by OAuth device-code flow abuse and adversary-in-the-middle (AiTM) kits …

Chrome Extension Monitors AI Conversations Across ChatGPT, Claude, Gemini, and Other Platforms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 A Chrome extension with roughly 100,000 installs is quietly harvesting every prompt and AI response typed across nine major artificial intelligence platforms. Despite its official listing and privacy policy explicitly claiming zero personal data collection, the extension …

Nginx Buffer Overflow Vulnerability Allows Attackers to Execute Arbitrary Code – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 A high-severity heap buffer overflow in NGINX Plus and NGINX Open Source can let unauthenticated attackers crash worker processes and, under certain conditions, run arbitrary code. Tracked as CVE-2026-42533, the flaw affects configurations that use regex-based map …

Aembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent Interoperability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Silver Spring, MD, USA, July 28th, 2026, CyberNewswire To reduce identity risk when third-party AI agents access business systems, Aembit is launching a new integration with Snowflake to help enterprises securely govern third-party agents across platforms. Aembit, …

Apple iOS 26.6 Fixes Flaws Enabling Kernel Code Execution, Root Access and Sandbox Escape

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Apple has released iOS 26.6 and iPadOS 26.6 to address a significant number of security vulnerabilities, including flaws that could allow malicious applications to execute code with kernel privileges, gain root access, or escape Apple’s app sandbox. …

Fake Claude Code Install Guide Uses Google Ads to Deliver MacSync Infostealer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Fake Google Ads are being used to push a convincing Claude Code installation guide that delivers the MacSync infostealer to macOS users. The campaign turns an ordinary developer search into a path for credential theft and wider …

Origin Confirms Data Breach – Hackers Accessed 900,000 Customers’ Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Origin Energy, an Australian energy provider, has confirmed that unauthorized access to customer information has affected approximately 900,000 current and former customers. The company has completed its initial review of the data security incident, and a broader …

Hackers Are Using Fake Crypto Wallet Screens to Steal Recovery Phrases and Browser Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Criminals are using convincing cryptocurrency wallet screens and browser extensions to steal recovery phrases, login data, and active browser sessions. The activity is linked to a wider CastleLoader campaign that gives attackers several ways to gain access …

AI-Assisted Research Uncovers Linux Kernel Zero-Day Enabling Root Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A serious Linux kernel zero-day vulnerability capable of local privilege escalation (LPE) has been uncovered by security researchers, underscoring both the growing role of artificial intelligence in vulnerability research and the persistent security risks within complex kernel subsystems. Tracked as …

Researchers Say a ‘Ghost’ Chinese Company Built the Network Hiding PLA Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 A little-known Chinese company may have helped build the hidden network used to support military-linked cyber operations around the world. Researchers say Guangdong Chanming, a firm with no obvious public-facing business, appears connected to tools designed to …