Zbtlink Chinese Router Sold Worldwide Contains a Hidden Backdoor Affecting 20+ Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zbtlink routers sold in global markets have been found carrying a hidden remote-control implant that starts with the device. The discovery affects equipment used in homes, offices, temporary sites and vehicles, turning a trusted network gateway into a potential entry …

Top 10 Best Protective DNS (PDNS) Services in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Top 10 Best Protective DNS (PDNS) Services in 2026 Protective DNS went from best practice to expectation: NSA and CISA jointly recommend it, national programs run it at population scale, and it remains the highest-leverage, lowest-friction control most organizations can …

SilverFox Hijacks Trusted Software and Kernel Drivers to Disable Security Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 SilverFox has expanded its malware toolkit in a campaign that targeted a Japanese industrial manufacturer. The attackers used a fake invoice email to lure a recipient into downloading a ZIP archive hosted through services that normally appear …

4,400+ Internet-Exposed Rockwell PLCs Expose Water Systems to Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 A wave of cyberattacks against U.S. water and wastewater utilities has renewed alarm over how many industrial controllers remain directly reachable from the public internet. New research from Forescout has identified 4,407 internet-facing Rockwell Automation/Allen-Bradley programmable logic …

Canadian Man Pleads Guilty in Snowflake Extortions

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor …

Vanta Stealer Empties Browser Vaults, Crypto Wallets and Gaming Accounts in Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Vanta Stealer is a newly analyzed information-stealing malware built to strip valuable data from an infected computer quickly. It reaches far beyond saved browser passwords, pulling cookies, payment details, account tokens, wallet files and private documents into …

Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks A repeatable vulnerability pattern across AI coding agents from Anthropic, Google, and OpenAI that allows attackers to achieve remote code execution, steal …

Hackers Can Leverage WSUS Servers to Deliver Malware and Compromise Enterprise Endpoints

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks A novel attack chain that allows adversaries to hijack Windows Server Update Services (WSUS), the trusted patch-management architecture widely deployed across enterprise …

Top 10 Best Intrusion Detection & Prevention (IDS/IPS) Tools in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 An IDS detects malicious activity and alerts; an IPS sits inline and blocks it. Cisco Secure IPS is our top pick for 2026 on the strength of Snort 3 and Talos threat intelligence, with Palo Alto Networks …

Critical Paperclip Vulnerabilities Allow Attackers to Gain Admin Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical vulnerabilities have been disclosed in Paperclip, an AI agent orchestration platform, that could allow attackers to gain administrative access and execute commands on affected servers. The most severe flaw, tracked as CVE-2026-41679, carries a CVSS score of 10.0 and …