MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting vulnerability in the widely used MapLibre GL JS library could expose applications and an estimated 2.7 million users to zero-click attacks. The flaw, tracked as CVE-2026-85061 and GitHub Security Advisory GHSA-jrc7-96c5-q579, affects maplibre-gl versions 6.4.0 and …

Microsoft Expands Windows Family Safety With Built-In Age Verification and Parental Controls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is expanding Windows Family Safety with account-based age verification, privacy-focused age signals, and improved parental controls. The company said the updates are designed to help Windows apps, games, services, and AI experiences provide protections that match a user’s age. …

Critical ArangoDB Flaws Allow Authentication Bypass and Remote Code Execution as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical flaws in ArangoDB can let an outsider bypass login controls, read or alter database data, and then gain root-level code execution on the underlying host. The issues affect installations through version 3.12.10.1, creating serious risk for internet-facing databases …

Android Security Update September 2026 – Fix for Critical Flaws that Enable RCE Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released the Android Security Bulletin for September 2026, addressing several critical vulnerabilities that could let attackers execute code remotely on affected devices. The update, published on September 8, includes security patch levels dated 2026-09-01 and 2026-09-05. Android users should …

CISA Warns of N-able N-central RCE Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency has added a maximum-severity flaw in N-able’s N-central remote monitoring and management platform to its Known Exploited Vulnerabilities catalog, confirming that attackers are actively abusing the bug against real-world targets. The vulnerability, tracked as …

Microsoft Teams for Android Vulnerability Exposes Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released a security update for CVE-2026-65812, a vulnerability in Microsoft Teams for Android that could allow an authorized attacker to disclose sensitive information, including user credentials. Microsoft published the flaw on September 8, 2026, and rates it as …

Hackers Clone Banking Apps Into Hidden Android Work Profiles to Evade Fraud Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android banking fraud is entering a deceptive phase. Attackers are using malware that copies targeted banking apps into a concealed Android work profile, separating a fraudulent session from warning signs seen on the phone. The operation begins with Gigabud, an …

SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Austin, Texas / USA, September 9th, 2026, CyberNewswire Ninety-five percent of organizations believe they have visibility into their AI and machine identity exposures, yet only 36% are actually monitoring them. SpyCloud, the leader in identity threat protection, today released its …

Hackers Use Autonomous AI Agents to Launch Mass Credential Theft Attacks in Under 6 Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are using autonomous AI agents to turn compromised cloud systems into fast-moving credential theft platforms. In one recent case, attackers planned, built, and launched a large-scale campaign in less than six hours, stealing thousands of third-party credentials. The operation …

Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are widening the reach of information-stealing malware by targeting the local data created by AI coding agents. The shift puts access tokens, saved connections, prompt histories, and project records at risk on already infected computers. The activity does not …