Microsoft to Retire Manifest V2 Extensions and Switch to V3 for Improved Security and Performance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft will retire support for Manifest V2 browser extensions in Microsoft Edge by early 2027, requiring users, enterprises, and developers to move to Manifest V3. The transition is intended to strengthen browser security, improve performance, and reduce the risks linked …

ConnectWise Warns of New ScreenConnect Remote Access Flaw – Released Mitigation Steps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ConnectWise has warned customers about a newly identified security issue affecting file transfer behavior in ScreenConnect Remote Access Support and Access sessions. The issue impacts both cloud-hosted and on-premises ScreenConnect deployments, and the company has released interim mitigation guidance while …

New Linux Bot Hides as Kernel Process and Launches DDoS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Linux bot called Tengu is built to stay hidden and turn compromised systems into tools for disruption. The 32-bit malware poses as a routine kernel worker, persists across several Linux setups, and can generate traffic floods against selected …

OpenAI Commits $1 Billion to Give Critical Infrastructure Defenders Frontier AI Cyber Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has launched Daybreak for Frontline Defenders, a global cybersecurity initiative designed to help organizations protecting essential services use frontier AI capabilities against increasingly advanced cyber threats. The company said it will commit $1 billion in subsidized access to Daybreak …

LG Smart TVs Caught Scanning Networks and Logging Audio in Standby

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Your LG smart TV may be doing far more than displaying your favorite shows while it sits “off” in the corner of your living room. A new investigation from Gamers Nexus, conducted alongside Level1Techs and independent security researchers, alleges that …

New BYOTC Attack Hijacks Trusted Windows Apps to Abuse Privileged Kernel Drivers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Windows attack shows how a trusted program can become a path to sensitive system functions. The method, called Bring Your Own Trusted Caller, or BYOTC, turns a legitimate user-mode application into the tool that asks a privileged driver …

Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kimsuky has been observed using an AI agent to produce convincing phishing decoys at scale, then hiding malware inside Windows shortcut files. The latest activity shows how ordinary-looking documents can become the first step in compromise. The campaign begins with …

DPRK-Linked Hackers Deploy Ted Backdoor and CurlRAT Against South Korean Firms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

South Korean automotive and media organizations have been hit by a quiet Linux intrusion toolkit built for long-term access. The malware hides inside software that manages web traffic, allowing attackers to watch users, steal information, and change pages delivered through …

Roundcube Webmail Patches 12 Security Flaws, Including Zero-Click XSS and SSRF Bypass

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Roundcube Webmail has released security updates for its 1.6 LTS and 1.7 branches, fixing 12 vulnerabilities that could expose users and servers to cross-site scripting, email header injection, cross-user data access, remote-content bypasses, and server-side request forgery attacks. The new …

Fake Minecraft Mod Deploys Myth Stealer RAT to Steal Browser Credentials and Cookies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A counterfeit Minecraft optimisation mod is installing Myth Stealer, malware that can steal browser passwords, cookies and data. Its malicious file looks useful because features work as advertised, giving players little reason to suspect a hidden threat. The campaign exploits …