Eight NodeBB Vulnerabilities Let Hackers Read Your Private Chats and Take Over the Forum

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Eight high-severity vulnerabilities have been discovered in NodeBB, a popular Node.js-based forum platform, exposing millions of users to risks including private message leaks, stored cross-site scripting (XSS), and full forum compromise. The issues affect all NodeBB versions prior to 4.14.0 …

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 A critical vulnerability in OpenAI’s ChatGPT Workspace Agents, dubbed AgentForger, that allowed a single phishing link to silently build, configure, and publish an attacker-controlled autonomous agent inside a victim’s organization. Unlike traditional Cross-Site Request Forgery (CSRF), which …

Claude AI Shared Chats Reportedly Exposed in Google Search Results

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 26, 2026 Anthropic’s Claude share links appeared in public search results, raising fresh privacy concerns for users who shared sensitive conversations. A Reddit post this weekend revealed that hundreds of Claude AI shared chats were publicly discoverable through Google. …

Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors continued to combine classic exploitation techniques with AI-accelerated tooling this week, from a 15-year-old NGINX bug and an actively exploited Check Point authentication flaw to autonomous AI agents chaining zero-days against Hugging Face. Below is a roundup of …

How Pro-Iran Hacktivist Networks Mobilize During Kinetic Conflict

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 26, 2026 The current conflict between the United States and Iran has become a case study in how asymmetric warfare and coalition building are reshaping the cyber and geopolitical dimensions of modern conflict. Following the United States and Israel’s …

Top 10 Best Active Directory Management Tools 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Managing Active Directory with native tools alone can become time-consuming as an organization grows. Routine tasks such as provisioning users, resetting passwords, managing group memberships, auditing permissions, and maintaining compliance can place a heavy burden on IT teams. Manual processes …

PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 26, 2026 PentesterFlow is a new open-source, human-in-the-loop agentic AI command-line tool built specifically for penetration testers and bug bounty hunters, designed to automate recon-to-reporting workflows without sacrificing analyst oversight. Most agentic AI security tools suffer from hallucinated findings, …

GitLab Vulnerabilities Allow Attackers to Execute Remote Code on Default GitLab Installations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 25, 2026 A newly disclosed exploit chain in GitLab shows how two long-buried memory-safety flaws in a Ruby JSON parsing library, Oj, could be combined to achieve remote code execution on default GitLab installations, exposing source code, Rails secrets, …

Researcher Claims Working Jailbreak on Top AI Models Including GPT-5.6, Claude Opus 5, and Fable

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 25, 2026 A well-known AI red teamer claims to have developed a universal jailbreak that works against leading large language models, including heavily guarded flagships such as GPT-5.6 Sol, Claude Opus 5, and Fable. In a public post on …

10 Best ZTNA Solutions (Zero Trust Network Access) In 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

10 Best ZTNA Solutions (Zero Trust Network Access) in 2024 Zero Trust Network Access (ZTNA) anchors 2026 cybersecurity amid remote, cloud, and hybrid booms. ZTNA solutions aren’t hype—they’re vital for data locks, compliance wins, and borderless teams. “Never trust, always …