GeoServer’s Unauthenticated SQL injection Vulnerability Enables RCE Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GeoServer administrators should urgently update affected systems after researchers disclosed an unauthenticated SQL injection flaw in the jsonArrayContains filter function. The issue can allow attackers to manipulate database queries via publicly accessible OGC WMS and WFS services and, under dangerous …

Z.ai Unveils GLM-5.3 with Major Enhancements for Coding and Cybersecurity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Z.ai has released GLM-5.3, a new AI model built to handle complex coding, long-running agent tasks, and cybersecurity analysis. The company says the model uses the same base model as GLM-5.2, with improvements coming entirely from larger-scale post-training. The release …

New MessiahGPT AI Model Fueling Automated Ransomware and Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A criminal AI service called MessiahGPT is being marketed on BreachForums as an uncensored platform for creating ransomware, phishing kits, stealers, crypters, rootkits, and social-engineering content. Trellix researchers describe it as part of a growing underground market …

Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 Fake job interviews are again being used to breach cryptocurrency teams. In a documented case, a convincing Web3 recruitment process led a Windows user to install malware that stole private keys, browser data, and other sensitive information. …

Evooo1Bot Linux Botnet Uses 16 DDoS Methods and SOCKS5 Proxies to Hijack Edge Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly tracked Linux botnet is turning exposed edge devices into tools for disruption, remote access, and traffic relaying. Evooo1Bot is the threat that reaches internet-facing edge systems by exploiting known flaws and attempting weak SSH logins. …

ChainDrop npm Worm Poisons 444 Packages Through GitHub Actions and Trusted Publishing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 ChainDrop has made an npm package compromise a warning about developer machines. The self-propagating campaign poisoned 444 packages and more than 1,300 malicious releases after attackers took over the GitHub account tied to the Keyv caching library. …

12 KB Windows Backdoor Hides C2 Domain in desktop.ini Whitespace to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly documented Windows backdoor shows how little code an attacker needs to stay hidden. The 12 KB implant was found on one corporate workstation, where it posed as Realtek audio software. Its small footprint differs from Windows …

Safepal Confirm Hackers Gained Access to Customer Order Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 SafePal has confirmed a security incident in which unauthorized parties accessed customer order information through a flaw in an order-tracking plug-in. The company said the incident affected approximately 39,798 customers who placed orders between March 2, 2025 …

Apple Screen Sharing Vulnerability Exploited to Execute Command as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly disclosed logic flaw in macOS Screen Sharing shows how a feature meant only to grant screen-viewing access can be twisted into a path for full root command execution. The issue, tracked as CVE-2026-43760, affects the …

Cyber Security Weekly Newsletter – Outlook RCE, Palo Alto, Cisco 0-day and Windows 0-Day Flaws +20 Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

This week’s roundup covers a record-setting Microsoft Patch Tuesday, an actively exploited Cisco firewall zero-day, a Lazarus-linked Windows kernel bug, and critical flaws across TP-Link, Palo Alto Networks, Fortinet, and VMware — plus a first-of-its-kind autonomous AI agent “hack” and …