Claude Code Symlink Import Lets Malicious Repositories Silently Exfiltrate Local Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 Claude Code can load files from outside a repository through a symlinked memory import, which may allow local data to be included in the model’s first outbound request before the model performs any actions. A recently reported …

Hackers are Setting Up Websites Impersonating Popular Windows Apps to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 Hackers are quietly building lookalike websites that pretend to be popular Windows apps, then use those pages to push malware onto unsuspecting users. The scheme already covers more than 70 well known utilities that people trust and …

SparkKitty Malware Steals Crypto Wallet Seed Phrases From iOS and Android Photos

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 A new mobile threat is quietly targeting cryptocurrency users by reading the photos stored on their phones. Known as SparkKitty, this malware works on both iOS and Android devices and focuses on stealing wallet seed phrases hidden …

Windows 11’s File Explorer Is Now Faster at Deleting Large Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 Windows 11’s File Explorer Is Now Faster at Deleting Large Files Microsoft is rolling out a targeted performance update for Windows 11 designed to resolve one of the platform’s most persistent storage annoyances: sluggish deletion of large, …

Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A coordinated wave of exploitation targeting edge VPN and firewall appliances from four major vendors Palo Alto Networks, Fortinet, Citrix, and Check Point has emerged as the dominant initial-access vector for ransomware operators in mid-2026. Threat actors, including affiliates of …

BlueNoroff Hijacks Trusted Telegram Accounts to Deliver ClickFix Malware Through Fake Zoom Calls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 A North Korean hacking unit has refined a scheme that turns everyday chats into malware traps. The BlueNoroff group, linked to the wider Lazarus ecosystem, is taking over real Telegram accounts that belong to trusted industry contacts. …

PyPI Blocks New File Uploads on 14-Day-Old Releases to Prevent Package Poisoning Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

PyPI has introduced a new security measure that prevents users from uploading new files to package releases that are more than 14 days old. This change aims to stop attackers from adding malicious files to trusted Python package versions after …

Researchers Successfully Booted Jailbroken Version of iOS 27 on an iPhone 11 Pro

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have successfully booted a jailbroken build of iOS 27 on an iPhone 11 Pro by combining the recently disclosed usbliter8 SecureROM exploit with a heavily modified custom firmware workflow. The demonstration targets Apple’s A13-powered iPhone 11 Pro. It …

Google Is Giving Hacker Groups New Names That Reveal Who They Are and Why They Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 Google is changing how it names the hacker groups it tracks, replacing a patchwork of labels with names designed to explain more at a glance. The change is intended to make threat reports easier to follow when …

Eight NodeBB Vulnerabilities Let Hackers Read Your Private Chats and Take Over the Forum

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Eight high-severity vulnerabilities have been discovered in NodeBB, a popular Node.js-based forum platform, exposing millions of users to risks including private message leaks, stored cross-site scripting (XSS), and full forum compromise. The issues affect all NodeBB versions prior to 4.14.0 …