TP-Link Kasa Smart Home Devices Vulnerability Allows Attackers to Disrupt Device Functionality

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TP-Link has disclosed a high-severity vulnerability affecting multiple Kasa smart home devices that could allow attackers on the same local network to intercept, replay, or forge device-control commands. Tracked as CVE-2026-76784, the flaw can lead to unauthorized changes to device …

CISA Warns of Microsoft SQL Server RCE Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft SQL Server remote code execution vulnerability, tracked as CVE-2019-1068, to its Known Exploited Vulnerabilities catalog after confirming exploitation in attacks. The flaw affects Microsoft SQL Server and can allow …

Two Australians Charged Over TeamPCP Supply-Chain Attacks That Hit 1,000+ Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two Western Australian men have been charged over alleged TeamPCP supply-chain attacks that police say planted malicious open-source code and reached more than 1,000 organizations worldwide. The Australian Federal Police charged the pair on 26 August 2026 with a combined …

AWS Shows How Hackers Can Turn Stolen Cloud Credentials Into Full-Scale Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Stolen cloud credentials can turn an incident into a wider breach. An attacker who gets a valid AWS key or session can enter as an approved user and move toward sensitive systems. It can begin with an unfamiliar address, expand …

Multiple TeamViewer Vulnerabilities Enable Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TeamViewer patched high-severity CVE-2026-16444, allowing authenticated remote-session attackers to write files to unintended locations and potentially execute code with user privileges. The issue is detailed in TeamViewer security bulletin TV-2026-1008, published on August 26, 2026. It affects TeamViewer Remote, TeamViewer …

Hackers Exploit ownCloud and WordPress Flaws to Steal Philippine Nuclear and Naval Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A suspected Chinese-speaking operator exploited known ownCloud and WordPress weaknesses to collect sensitive information from a Philippine nuclear research body and a marine engineering company that serves the Philippine Navy. The intrusion shows how unpatched internet-facing systems can expose data …

Hackers Exploit AI Infrastructure to Steal API Keys, Gain Persistence and Mine Cryptocurrency

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are increasingly turning AI platforms into a doorway to valuable corporate systems. New Microsoft research shows that exposed AI gateways, retrieval tools, and workflow services can give intruders a path to provider credentials, databases, container environments, and powerful computing …

Ransomware Hacker Uses AI to Plan Cyberattacks Against More Than 20 Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Aurora ransomware has been tied to a Russian-speaking affiliate that used an AI coding assistant while targeting more than 20 organisations. A wrongly exposed server gave investigators a detailed view of the operator’s activity, from intrusion to payment. The activity …

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian …

Veeam Backup & Replication Flaw Exposes Guest OS Credentials in Cleartext Logs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam has disclosed a critical security vulnerability in Veeam ONE 13 that could allow an unauthenticated remote attacker to coerce SMB authentication from the product’s service account. Tracked as CVE-2026-65641, the issue carries a CVSS v4.0 score of 9.3 and …