Microsoft Confirms Windows 11 Update Bug Causing Black Screens and Loading Issues

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a Windows 11 issue that can leave users staring at a black screen after signing in, with the desktop shell failing to start automatically. The problem emerged after installation of the August 27, 2026 non-security preview updates …

Google Ads Campaign Spreads Fake Security Alerts That Lock Browsers and Push Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malicious ads are steering people to fake security warnings that appear to take over their browsers. The pages urge visitors to call a supposed support line, turning a routine ad click into an attempt to extract money, personal details or …

CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency has added two Check Point vulnerabilities to its Known Exploited Vulnerabilities Catalog, warning that attackers are actively exploiting the flaws against affected environments. The issues affect Check Point Security Gateway, Spark Firewall, Security …

AI agents Tried to Hack Public Websites After Failing to Access Data Through Normal Methods

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Autonomous AI agents allegedly attempted to probe and hack public data websites after normal methods of retrieving information failed, according to a new investigation by AI research group Transluce. The activity included attempted attacks on a U.S. public-data platform, a …

Microsoft Finds Ransomware Group Using Same Attack Blueprint Across Multiple Malware Families

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has linked a ransomware affiliate to attacks that ended with four different ransomware families. The group, tracked as Storm-2570, repeatedly used the same methods to take control of networks, steal data and prepare systems for encryption. The changing ransomware …

HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hewlett Packard Enterprise has released security updates for HPE Networking Analytics and Location Engine, or ALE, after finding multiple flaws that could let attackers bypass security controls, access sensitive data, and take over vulnerable systems. The issues affect ALE version …

Microsoft Password Reset Portal Could Reveal Users and MFA Protection Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s SSPR portal may expose sensitive account details to unauthenticated users, including whether an Entra ID account exists and its registered password-reset methods. Such exposure might assist attackers in refining their phishing, password-spraying, and social engineering attacks on corporate networks. …

Critical GitLab Bugs Let Attackers Execute Code Through Malicious CI/CD Regex

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released emergency security updates to fix two critical vulnerabilities that could allow authenticated attackers to execute arbitrary code on vulnerable GitLab servers through specially crafted regular expressions in CI/CD configurations. The flaws, tracked as CVE-2026-89078 and CVE-2026-93577, affect …

Hackers Actively Exploiting WordPress Vulnerability to Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The critical WordPress vulnerability CVE-2026-87902 is being actively exploited, with activity progressing from reconnaissance to attempts to write malicious PHP files on vulnerable servers. The flaw affects WordPress Core versions 4.7.0 through 7.1.1 and has been fixed in WordPress 7.1.2 …

CISA Warns of WSO2 Multiple Products Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical WSO2 vulnerability (CVE-2026-5430) to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting the flaw in real-world attacks. The issue affects several WSO2 products used to …