SourTrade Malvertising Builds Unique Malware Inside Victims’ Browsers to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 SourTrade is a long-running malvertising operation that uses fake ads to lure cryptocurrency users toward convincing copies of trading and exchange platforms. The campaign has been active since late 2024 and has targeted users across Asia-Pacific, Latin …

Security Flaws Found in Every Script Generated by ChatGPT, Copilot, and Gemini

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new academic study from Beacom College of Computer & Cyber Sciences has revealed that every automation script generated by leading AI models ChatGPT, Microsoft Copilot, and Google Gemini contained exploitable security vulnerabilities. As enterprises increasingly rely on AI tools …

New HTTP/2 Vulnerability Lets Hackers Crash Servers With Memory Exhaustion Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 A newly disclosed HTTP/2 denial-of-service vulnerability is raising concerns across the cybersecurity community after researchers confirmed that unauthenticated attackers can crash vulnerable servers by triggering memory exhaustion conditions. The issue affects multiple HTTP/2 implementations that fail to …

One Compromised Wi-Fi Gateway Can Redirect Every Hotel Guest to Attacker Controlled Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 One compromised hotel Wi-Fi gateway can silently redirect every guest to attacker controlled servers, putting corporate accounts at risk even when users think they are browsing safely. The campaign starts with a simple idea that many travelers …

How Infostealer Logs Became the Fuel Behind Massive Cloud Data Breaches

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

How Infostealer Logs Became the Fuel Behind Massive Cloud Data Breaches Infostealer malware has quietly become the single most important initial-access commodity in the cybercrime economy, replacing traditional phishing and exploit-driven intrusions as the leading precursor to enterprise breaches and …

Google Rolls Out Emergency Chrome Update for Four High-Severity Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has released an emergency security update for its Chrome browser, addressing four high-severity vulnerabilities that could expose users to serious risks if left unpatched. The update, now rolling out globally, upgrades Chrome to version 150.0.7871.186/.187 for Windows and macOS, …

Hackers Hide 750MB Lampion RAT Inside Fake Payment Receipt Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Hackers are using fake payment receipt emails to deliver a 750MB Lampion remote access trojan to targets in Portugal. The campaign relies on familiar financial language, convincing business details, and oversized files designed to slow down analysis …

Microsoft Detects 7.6 Billion Email Phishing Threats as Teams Vishing Attacks Increases 10-Fold

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Email phishing remains one of the most common ways attackers gain access to business accounts. During the second quarter of 2026, criminals continued to use fake login pages, malicious attachments, and convincing business messages to steal credentials …

Russian Hackers Exploiting Zimbra Zero-Day to Steal 90 Days of Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 Russian state-backed hackers, identified as LAUNDRY BEAR, are exploiting a zero-day vulnerability in the Zimbra Collaboration Suite (ZCS) to stealthily extract sensitive information, including emails, from Western organizations. This operation is focused on espionage rather than financial …

Malicious RubyGems Turn Developer Machines Into Monero Miners and Spread Through SSH

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 24, 2026 A malicious RubyGems campaign has turned seemingly useful developer packages into tools for hidden cryptocurrency mining. The poisoned packages can consume a machine’s computing power, slow down development work, and quietly generate Monero for the attackers. The …