Researchers Successfully Booted Jailbroken Version of iOS 27 on an iPhone 11 Pro

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have successfully booted a jailbroken build of iOS 27 on an iPhone 11 Pro by combining the recently disclosed usbliter8 SecureROM exploit with a heavily modified custom firmware workflow. The demonstration targets Apple’s A13-powered iPhone 11 Pro. It …

Google Is Giving Hacker Groups New Names That Reveal Who They Are and Why They Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 Google is changing how it names the hacker groups it tracks, replacing a patchwork of labels with names designed to explain more at a glance. The change is intended to make threat reports easier to follow when …

Eight NodeBB Vulnerabilities Let Hackers Read Your Private Chats and Take Over the Forum

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Eight high-severity vulnerabilities have been discovered in NodeBB, a popular Node.js-based forum platform, exposing millions of users to risks including private message leaks, stored cross-site scripting (XSS), and full forum compromise. The issues affect all NodeBB versions prior to 4.14.0 …

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 27, 2026 A critical vulnerability in OpenAI’s ChatGPT Workspace Agents, dubbed AgentForger, that allowed a single phishing link to silently build, configure, and publish an attacker-controlled autonomous agent inside a victim’s organization. Unlike traditional Cross-Site Request Forgery (CSRF), which …

Claude AI Shared Chats Reportedly Exposed in Google Search Results

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 26, 2026 Anthropic’s Claude share links appeared in public search results, raising fresh privacy concerns for users who shared sensitive conversations. A Reddit post this weekend revealed that hundreds of Claude AI shared chats were publicly discoverable through Google. …

Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors continued to combine classic exploitation techniques with AI-accelerated tooling this week, from a 15-year-old NGINX bug and an actively exploited Check Point authentication flaw to autonomous AI agents chaining zero-days against Hugging Face. Below is a roundup of …

How Pro-Iran Hacktivist Networks Mobilize During Kinetic Conflict

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 26, 2026 The current conflict between the United States and Iran has become a case study in how asymmetric warfare and coalition building are reshaping the cyber and geopolitical dimensions of modern conflict. Following the United States and Israel’s …

Top 10 Best Active Directory Management Tools 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Managing Active Directory with native tools alone can become time-consuming as an organization grows. Routine tasks such as provisioning users, resetting passwords, managing group memberships, auditing permissions, and maintaining compliance can place a heavy burden on IT teams. Manual processes …

PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 26, 2026 PentesterFlow is a new open-source, human-in-the-loop agentic AI command-line tool built specifically for penetration testers and bug bounty hunters, designed to automate recon-to-reporting workflows without sacrificing analyst oversight. Most agentic AI security tools suffer from hallucinated findings, …

GitLab Vulnerabilities Allow Attackers to Execute Remote Code on Default GitLab Installations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 25, 2026 A newly disclosed exploit chain in GitLab shows how two long-buried memory-safety flaws in a Ruby JSON parsing library, Oj, could be combined to achieve remote code execution on default GitLab installations, exposing source code, Rails secrets, …