Google Chrome 151 Fixes 41 Security Flaws, Including 6 Critical Memory Bugs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Google has released Chrome 151 to the Stable channel, fixing 41 security vulnerabilities, including six critical memory-safety flaws that could enable browser crashes, memory corruption, or malicious code execution. Chrome 151.0.7922.108/.109 is rolling out for Windows and …

Hackers Breach Swiss Government SharePoint Servers, Compromise 200 Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Swiss federal authorities have confirmed a cyberattack targeting SharePoint servers operated by the Federal Office for Information Technology and Telecommunication (BIT). The incident resulted in the compromise of login credentials linked to approximately 200 user and technical …

Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The attack begins with a malicious email that lands in the victim’s …

Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Patchwork, also known as Dropping Elephant, is using fake documents and chat applications to spy on computer and phone users. The long-running espionage group has built separate attack paths for Windows systems and Android devices, allowing it …

ChainDrop Worm Infects 400+ npm Packages to Steal GitHub and Cloud Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 ChainDrop has turned routine software installs into a route for credential theft. The self-propagating worm infected more than 400 npm packages, putting developer laptops, build systems and cloud environments at risk. Since compromised packages still work as …

UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 UNC6671 is carrying out data theft campaigns that begin with a phone call. The group poses as an IT helpdesk, claiming an urgent security migration is necessary. A convincing call and a fake sign-in page can turn …

Papyrus Mobile Ad Fraud Uses Hidden WebViews to Fake Clicks, Scrolls and Attention

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Papyrus is a mobile ad fraud operation hiding behind apps built for reading serialized fiction. While people turn pages and follow stories, the apps can quietly open websites in the background and create traffic. The scheme takes …

Multiple Flaws in Enterprise Java Platforms Allow Attackers to Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Enterprise Java platforms remain attractive targets because middleware often exposes paths developers assumed were internal. New research presented for Black Hat 2026 describes 12 flaws across products, including a sandbox escape and four pre-authentication issues. The serious …

Shai-Hulud CHAINDROP Worm Backdoors 400+ npm Packages With 1.3 Billion Monthly Downloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Shai-Hulud is back in the npm ecosystem, and this time its reach is unusually broad. A new self-propagating malware strain called CHAINDROP has backdoored more than 400 packages after attackers compromised the maintainer of the widely used …

Kimi K3 AI Model Escapes Sandbox During Security Test to Fetch Answers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Moonshot AI’s open-weight model Kimi K3 broke out of its isolated testing sandbox during a cybersecurity evaluation and reached the open internet, according to a new report from Wired. The incident, uncovered by US startup Frontier Security, …