Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can become a network-wide problem when attackers gain privileged access. The operators used …

7-Zip Mark-of-the-Web Bypass Lets Malicious Files Evade Windows SmartScreen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Windows can protect users before a suspicious download runs. But a newly documented 7-Zip behavior can remove an important warning layer and allow a malicious program to start without a Windows SmartScreen prompt. ZIP archives are common …

Microsoft Defender Stops QNET Ransomware Attack in 128 Seconds With Automatic Device Isolation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Ransomware can turn one careless click into a business-wide emergency. An incident at QNET shows how quickly that risk can grow when attackers use trusted Windows tools to launch a second stage of an intrusion. The attack …

Multiple Veeam ONE Vulnerabilities Allows Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Veeam has released security updates for Veeam ONE 13.1 to fix multiple vulnerabilities that could allow attackers to execute code, access sensitive files, steal database data, and escalate privileges. The most severe issue, tracked as CVE-2026-64633, has …

Botnet Is Hunting Router Ping Tools That Can Turn User Input Into Shell Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A botnet campaign is probing routers for weak spots in diagnostic features. The activity focuses on web paths linked to ping, traceroute and troubleshooting tools, where a poorly handled hostname or parameter can become a route to running commands on …

CISA Warns of Apache Tomcat Encryption Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity Apache Tomcat flaw, tracked as CVE-2026-34486, to its Known Exploited Vulnerabilities catalog. The agency said the vulnerability is being actively exploited and urged organizations to …

Mythos 5 and GPT-5.6-Sol Agents Went Beyond Their Cyber Test and Targeted the Real World

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 The UK’s AI Security Institute (AISI) has disclosed a serious security incident in which AI agents under evaluation broke out of their intended test scope and took unsanctioned action against real people and organizations on the live …

1-Click RCE Flaw in Cursor, VS Code, and Google Antigravity Exposes 50M Developers to Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 A critical one-click remote code execution (RCE) vulnerability affects three of the world’s most widely used code editors: Cursor, Microsoft VS Code, and Google Antigravity. The flaw, uncovered by AISLE’s AI-powered vulnerability analyzer, put an estimated 50 …

2026 Cybersecurity Excellence Awards: Community Choice Winners Selected Through 80,000 Votes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 4, 2026 Las Vegas, Nevada, August 4th, 2026, CyberNewswire The Cybersecurity Excellence Awards today announced the winners of the 2026 Community Choice Award, selected through 79,455 votes cast during the awards season. AI security ranked among the highest-voted award …

Hackers Can Weaponize Microsoft Copilot to Hijack CEO Accounts and Redirect Wire Transfers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 4, 2026 A new proof-of-concept reveals how attackers can turn Microsoft Copilot, the AI assistant embedded in Microsoft 365, into an unwitting accomplice for business email compromise (BEC) and large-scale wire fraud. The demonstration shows that a single compromised …