Foxit Updater Vulnerability Gives Standard Users SYSTEM-Level Control of Windows Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 25, 2026 Foxit PDF Reader has been found vulnerable to a local privilege escalation flaw that allows standard Windows users to gain full SYSTEM-level control under specific conditions. The issue, tracked as CVE-2026-57239, was disclosed following research into Foxit’s …

Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Tel Aviv, Israel, July 24th, 2026, CyberNewswire One week after disclosing that Anthropic’s Claude Tag Slack integration could be driven by plain “@Claude” text, Tego AI today published a second piece of research on the Claude ecosystem. …

Certighost Active Directory CS Exploit Allows Low-Privileged Users to Compromise Domain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 A newly disclosed Active Directory Certificate Services (AD CS) vulnerability, dubbed Certighost, allowed a low-privilege domain user to impersonate a Domain Controller and take over an entire Active Directory domain. Tracked as CVE-2026-54121, the flaw was patched …

Bing Images Vulnerability Lets Attackers Execute Remote Code on Microsoft Servers Using SVG File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Three critical remote code execution (RCE) vulnerabilities in Microsoft’s infrastructure, with two flaws in Bing Images allowing attackers to hijack backend image-processing servers using nothing more than a crafted SVG file. The findings, disclosed responsibly by XBOW …

Cl0p Hackers Exploit Windchill Servers to Steal Companies’ Secret Product Designs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Cl0p ransomware affiliates are exploiting exposed PTC Windchill and FlexPLM servers to steal engineering and product-design data. The campaign combines software flaws to gain access without credentials, install hidden server-side access, and remove sensitive files before demanding …

Apache Syncope Release Patches for Multiple RCE and SQL Injection Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Apache has issued critical security updates for its Syncope identity and access management (IAM) platform to address multiple vulnerabilities, including remote code execution (RCE), SQL injection, privilege escalation, server-side request forgery (SSRF), and information disclosure. These flaws …

ChonkyChicken Malware Steals Chrome Credentials, Moves Laterally and Spies on Victims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 ChonkyChicken is a newly identified remote access trojan designed to turn one infected Windows device into a platform for credential theft, network movement, and surveillance. The malware is part of the TAG-195, also called Golden Chickens or …

Microsoft Confirms No Bloatware Ads in Windows 11; LG Disables McAfee Pop-ups in Monitor App

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Microsoft has moved quickly to shut down unwanted antivirus advertising after users discovered that connecting an LG monitor could silently install companion software and trigger a McAfee trial pop-up on Windows 11. The issue surfaced when owners …

SourTrade Malvertising Builds Unique Malware Inside Victims’ Browsers to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 SourTrade is a long-running malvertising operation that uses fake ads to lure cryptocurrency users toward convincing copies of trading and exchange platforms. The campaign has been active since late 2024 and has targeted users across Asia-Pacific, Latin …

Security Flaws Found in Every Script Generated by ChatGPT, Copilot, and Gemini

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new academic study from Beacom College of Computer & Cyber Sciences has revealed that every automation script generated by leading AI models ChatGPT, Microsoft Copilot, and Google Gemini contained exploitable security vulnerabilities. As enterprises increasingly rely on AI tools …