Malicious AI Agent Skill Bypasses Security Scans and Seized Full Control of Over 26,000 Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A malicious AI “skill” created as part of a controlled security experiment has exposed critical weaknesses in modern AI agent ecosystems, successfully bypassing security scanners and compromising more than 26,000 agents across individual and enterprise environments. According …

Claude Fable 5 Wrote Windows Kernel Code in Rust in 38 Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Anthropic’s Claude Fable 5 generated a complete, bootable NT-compatible Windows kernel written in Rust called ntoskrnl-rs from an empty directory in just 38 minutes of active model work, raising profound questions about AI-authored trust and the future …

GTA 6 Scam Websites Use AI-Generated Images and Fake Download Buttons to Lure Gamers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fresh wave of scam websites is targeting gamers worldwide, using the massive hype around Grand Theft Auto VI to trick people into handing over their money. These fake pages promise something millions of players desperately want: early access to …

FortiBleed Attack Hit 430,000+ FortiGate Firewalls, Stealing 110M+ Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 A large-scale, ongoing credential-harvesting campaign dubbed “FortiBleed” has silently compromised more than 430,000 FortiGate firewalls globally, siphoning over 110 million credentials directly from live network traffic since at least February 2026. The campaign came to light after …

How Attackers Exploit Privileged Access and How to Lock Them Out 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Every major breach you read about has a quiet middle chapter that rarely makes the headline. The headline is the ransom note or the leaked customer database. The middle chapter the part that actually decided the outcome is almost always the same: an attacker found a …

Critical Cisco Unified CM and SME Flaw Enables Remote Attacker to Launch SSRF Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 24, 2026 Cisco has warned customers about a critical server-side request forgery (SSRF) flaw in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME) that allows remote, unauthenticated attackers to write files on …

CISA Warns of Ubiquiti UniFi OS Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that at least one of the flaws is now being actively exploited in the wild. Federal civilian …

Hackers Use GoogleErrorReport Scheduled Task for Persistence in Dropping Elephant Campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 23, 2026 A well-known threat actor called Dropping Elephant has returned with a refined and more dangerous campaign, using a China-themed lure document to drop a reworked remote access trojan (RAT) onto victim machines. The attack is designed to …

In-Browser Data Inspection Lets Analysts Track Phishing Attack Flow Inside Browser Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 23, 2026 Phishing attacks have grown far more complex in recent years. Attackers no longer rely on simple static pages to steal credentials. Instead, they build layered redirect chains, execute dynamic scripts, and load content in stages, making it …

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 23, 2026 DC, United States, June 23rd, 2026, CyberNewswire Applications open 23 June–4 August 2026 to support nonprofits strengthening cybersecurity for civil society.  The Internet Society Foundation today announced the opening of a global call for applications to the Common Good Cyber …