Hackers Using AI to Get AWS Admin Access Within 10 Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AWS Admin Access in Minutes Threat actors leveraging artificial intelligence tools have compressed the cloud attack lifecycle from hours to mere minutes, according to new findings from the Sysdig Threat …

One Identity Appoints Gihan Munasinghe as Chief Technology Officer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Alisa Viejo, United States, February 4th, 2026, CyberNewsWire One Identity, a leader in unified identity security, today announced the appointment of Gihan Munasinghe as Chief Technology Officer. Munasinghe brings more than …

Hackers Exfiltrating NTDS.dit File to Gain Full Active Directory Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Active Directory remains the backbone of enterprise authentication systems, storing critical information about user accounts, passwords, and domain configurations. Recently, security experts have observed a surge in attacks targeting the …

Hackers Actively Scanning Citrix NetScaler Infrastructure to Discover Login Panels

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A large-scale reconnaissance campaign targeting Citrix ADC Gateway and NetScaler Gateway infrastructure was detected between January 28 and February 2, 2026, by the GreyNoise Global Observation Grid. The coordinated operation …

Ingress-Nginx Vulnerability Allow Attackers to Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ingress-Nginx Vulnerability A critical security vulnerability has been discovered in ingress-nginx, a popular Kubernetes ingress controller, that could allow authenticated attackers to execute arbitrary code and access sensitive cluster secrets. …

CISA Warns of SolarWinds Web Help Desk RCE Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA Warns SolarWinds Web Help Desk Vulnerability An urgent warning regarding a critical remote code execution (RCE) vulnerability in SolarWinds Web Help Desk. The vulnerability, tracked as CVE-2025-40551, exploits unsafe …

Chrome Vulnerabilities Let Attackers Execute Arbitrary Code and Crash System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chrome Vulnerabilities Arbitrary Code Google has released a critical security update for the Chrome Stable channel, addressing two high-severity vulnerabilities that expose users to potential arbitrary code execution (ACE) and …

Hackers Exploiting React Server Components Vulnerability in the Wild to Deploy Malicious Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

React Server Vulnerability Exploited Two months following the disclosure of CVE-2025-55182, exploitation activity targeting React Server Components has evolved from broad scanning into consolidated, high-volume attack campaigns. According to telemetry …

GlassWorm Infiltrated VSX Extensions with More than 22,000 Downloads to Attack Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GlassWorm has emerged as a serious threat to developers using the Open VSX Registry, where popular VSX extensions were silently turned into delivery vehicles for malware. Threat actors compromised a …

Infostealer Campaigns Expand to macOS as Attackers Abuse Python and Trusted Platforms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Infostealer campaigns that once focused mainly on Windows are now expanding aggressively to macOS, using Python and trusted platforms to reach new victims. Recent attacks show a clear shift: threat …