German Manufacturer Shrinks Security Alert Response While Protecting 10,000 Endpoints

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A five-person security team at an unnamed German manufacturer has cut a reported 15 minutes from each alert investigation after replacing an air-gapped forensic laptop with ANY.RUN’s cloud-managed Interactive Sandbox. The team protects approximately 10,000 endpoints and 10,000 users across …

Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WSO2 has disclosed a critical authentication bypass vulnerability that could allow remote attackers to take over accounts, including administrative accounts, in affected API management products. Tracked as CVE-2026-5430, the flaw has received a CVSS score of 10.0 and requires no …

GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GhostCode is a newly identified phishing kit that turns a normal Microsoft 365 sign-in into an account takeover. It does not need to steal a password. Instead, it persuades people to approve a login that gives criminals access to their …

Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a fresh service degradation affecting its Microsoft 365 suite, with users worldwide reporting an inability to access core applications since the evening of September 16, 2026. The incident, tracked internally as MO1472904, began at 7:17 PM GMT+5:30 …

Hackers Can Rent VectraRAT for $250 a Month to Take Control of Windows PCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers can now rent a Windows-focused remote access tool called VectraRAT for $250 a month, lowering the barrier to deep and persistent compromise. The malware gives paying operators a way to watch victims, steal data, run commands, and move traffic …

Hackers Use Cross-Platform Noodle RAT to Secretly Control Windows and Linux Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Noodle RAT is a remote-access trojan that gives attackers control of compromised computers and servers. Its renewed visibility matters because it runs on both Windows and Linux, allowing one malware family to follow victims across corporate networks. The tool has …

Smishing Hackers Can Watch Every Keystroke as Victims Enter Card Details and OTPs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new SMS phishing campaign turns a routine payment check into a live fraud session. Victims who tap a link reach convincing pages seeking card details, passwords, and one-time passcodes, while criminals see information as it is entered. The operation …

TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TP-Link Tapo C200 smart cameras were affected by two zero-day vulnerabilities that could allow attackers on the same network to bypass authentication or disrupt camera services. The flaws, tracked as CVE-2026-15315 and CVE-2026-15316, were fixed in firmware version V5_1.4.6, released …

Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache Syncope has disclosed three important security vulnerabilities that could allow authorized administrators to execute malicious SQL commands, bypass Groovy sandbox protections, and impersonate higher-privileged users. The issues affect several Apache Syncope 3.0, 4.0, and 4.1 releases and have been …

Critical HPE Vulnerabilities Allow Remote Attackers to Achieve Complete System Compromise

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hewlett Packard Enterprise has released security updates for HPE Networking EdgeConnect SD-WAN Gateways and SD-WAN Orchestrator after identifying dozens of vulnerabilities, including critical flaws that could let remote attackers take full control of affected systems. HPE tracks the issues in …