New Rust-Based LabubaRAT Impersonates NVIDIA Software to Hijack Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 A previously undocumented remote access tool dubbed LabubaRAT, a Rust-based implant that masquerades as NVIDIA software to compromise Windows systems. The malware uncovered by Blackpoint Cyber’s Adversary Pursuit Group (APG) is distributed as nvidia-sysruntime.exe uses fake vendor …

Chrome 150 Security Update Patches 15 Flaws, Including Two Critical Code Execution Ones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 Google has rolled out Chrome version 150.0.7871.124/.125 for Windows and macOS, and version 150.0.7871.124 for Linux users. This Stable Channel update addresses 15 security vulnerabilities, including two critical memory safety issues in Ozone. The update will be …

Critical SonicWall Firewall 0-Day Vulnerabilities Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 SonicWall has issued an urgent security advisory regarding two vulnerabilities affecting its SMA1000 Series appliances. The company is warning that attackers are actively exploiting these flaws in real-world attacks. The most critical issue, tracked as CVE-2026-15409, carries …

Researcher Claims Bypass of EU Age Verification App Using Chrome Extension

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Paul Moore has once again exposed critical weaknesses in the EU’s flagship age verification system, this time by bypassing the latest app release (version 2026.07-1) using a Chrome extension powered by ClaudeAI. The proof-of-concept shows that, despite months …

Chinese Hackers Embed Claude Code and DeepSeek in AI-Powered Government Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 Chinese Hackers Use Claude Code and DeepSeek in AI-Powered Government Cyberattacks An active, highly structured intrusion campaign co-opting commercial artificial intelligence platforms as operational engines for state-sponsored operations. Rather than acting as peripheral research tools, Claude Code …

Gamers Download Fake Cheats and Hand Attackers a Live Remote Control of Their Windows PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 New research uncovered 11 malicious NuGet packages disguised as game cheats, bots, and management panels for popular online titles. The campaign targets gaming communities playing titles such as Albion Online, GTA5RP, GrandRP, Majestic RP, and Throne and …

New LegacyHive Windows 0-day Vulnerability Allows Users to Load Another User’s Registry

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 A proof-of-concept exploit dubbed LegacyHive has been released, enabling a Windows elevation-of-privilege vulnerability in the Windows User Profile Service that allows a standard user to load another user’s registry hive under their own registry classes root. Registry …

Microsoft Active Directory Services 0-Day Vulnerability Actively Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 Microsoft has released security updates for CVE-2026-56155, an actively exploited elevation-of-privilege vulnerability in Active Directory Federation Services (AD FS). This flaw allows an authenticated local attacker with low privileges to gain administrator-level access on affected systems. CVE-2026-56155 …

Multiple Notepad++ Vulnerabilities Enable PowerShell Command Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 Notepad++ v8.9.7 has been released with critical security fixes addressing multiple vulnerabilities, including a high-risk PowerShell command injection flaw that could enable arbitrary code execution during installation. The update resolves five distinct issues spanning path traversal, buffer …

Windows BitLocker 0‑Day Vulnerability Allows Hackers to Bypass Security Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 15, 2026 A newly disclosed Windows BitLocker 0‑day vulnerability, tracked as CVE-2026-50661, exposes encrypted devices to physical attacks that can completely undermine Microsoft’s disk encryption guarantees. The flaw, classified as a security feature bypass, stems from a protection mechanism …