RefluXFS Linux Kernel Vulnerability Lets Attackers Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 A new Linux vulnerability dubbed “RefluXFS” — a race condition in the Linux kernel’s XFS filesystem copy-on-write path that lets an ordinary local user silently overwrite protected system files and seize host root privileges, even on systems …

Adobe Acrobat Extension Flaw Lets Attackers Steal WhatsApp Chats From 329 Million Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 A newly disclosed flaw in the Adobe Acrobat Chrome extension allowed attackers to silently harvest WhatsApp Web chats, contacts, and profile data from any user who simply visited a malicious webpage no clicks, downloads, or credential theft …

ASUS Patches Critical Router Vulnerability Enabling Remote Command Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 ASUS has released critical security updates to address a high-severity router vulnerability that could allow remote attackers to execute arbitrary commands on affected devices. The flaw, tracked as CVE-2026-13385, impacts multiple ASUS router firmware branches, including the …

A Hidden Line of Website Text Can Turn AWS Kiro Into a Remote Code Execution Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 A recently disclosed vulnerability in AWS Kiro, an AI-powered Integrated Development Environment (IDE), reveals how a hidden line of text on a webpage can be exploited for remote code execution on a developer’s machine, bypassing the platform’s …

Apple Releases Fixes for Hide My Email Flaw that Exposes Users’ Real Email Addresses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 Apple has released a security fix addressing a critical flaw in its iCloud+ “Hide My Email” feature that could expose users’ real email addresses, undermining the core privacy promise of the service. The vulnerability, which reportedly remained …

AI-Speed Attacks Are Forcing a Rethink of Incident Response

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 Byline: Nikola Petrovic Accelerating Attacks. Our Detection Processes Are Still Running on Human Time. In one of my previous roles, I regularly dealt with incident reports. Most of them arrived ex post. An incident happened, the immediate issue …

Royal Ransomware Uses Qbot and Cobalt Strike to Rapidly Compromise Windows Domains

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 Royal ransomware turned ordinary Windows compromises into enterprise-wide crises by pairing a phishing foothold with fast domain takeover. In incidents reviewed by responders, the operators used Qbot to gain a presence and then expanded their reach before …

Russian Intelligence Hijacks IP Cameras to Monitor Weapons Deliveries to Ukraine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 Russian intelligence services have been accused of turning everyday internet-connected cameras into surveillance tools for tracking weapons deliveries to Ukraine. The campaign shows how a device installed for basic security can become a source of military intelligence …

A Single Extra “t” in a NuGet Package Allow Attackers to Manipulate Results

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 A malicious NuGet package used a single extra letter to hide in plain sight, turning a familiar software dependency into a betting-fraud tool. The package, Newtonsoftt.Json.Net, copied the appearance of the widely used Newtonsoft.Json library while carrying code …

New NULLZEREPTOOL Uses Telegram to Launch 20 DDoS Methods With Rotating Proxies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 22, 2026 NULLZEREPTOOL is a newly uncovered attack framework that turns a Telegram bot into a remote control panel for powerful distributed denial of service campaigns backed by rotating proxy infrastructure. The framework came to light when a single …