Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sony has moved to protect PlayStation 5 consoles with its latest system software update, as the newly released Relapse jailbreak draws attention to a broad set of older PS5 firmware versions. The update matters for console owners because the public …

Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A flaw in a custom session-cookie system allowed an unauthenticated attacker to pose as employees and administrators in a yard management platform. The issue did not break Microsoft Entra ID itself. Instead, it let a weak application-side session layer accept …

Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Capacitor for Android and iOS could let a malicious link opened inside an affected mobile app load attacker-controlled web content at the application’s trusted origin. The issue, tracked as CVE-2026-103922, can expose app data stored in …

Safari History Database Tags Can Reveal What Users Were Browsing on macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A little-known Safari database feature could give digital forensic investigators another way to understand browsing activity on macOS. Safari’s History database can store automatically generated topic tags for some webpages, potentially revealing themes a user explored even when the original …

Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Milk Dragon is a phishing kit designed to turn an attractive online bargain into a fast-moving payment fraud attempt. The operation, also known as NaiLong, has been active since October 2025 and uses fake retail offers to draw shoppers toward …

Kiteworks Patches 126 Vulnerabilities in Massive Security Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kiteworks has released a major security update that addresses 126 vulnerabilities across its secure data transfer platform and associated applications. The update includes fixes for critical account takeover flaws, high-severity code execution bugs, security bypass issues, unauthorized data modification, privilege …

Cloudflare Launches Free Certificate Authority for the Whole Internet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare has announced plans to become a public Certificate Authority, expanding its role in securing the global web. The company aims to offer free, automated digital certificates for websites while also preparing the Internet for post-quantum cryptography. A Certificate Authority, …

OpenAI Blocks 15,000-User Campaign Trying to Extract Hidden AI Reasoning

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI disrupted a coordinated campaign involving more than 15,000 users that attempted to extract protected reasoning from its AI models through adversarial distillation. Protected reasoning refers to the internal process a model uses to work through a task before producing …

Treasury Sanctions Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in Losses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Treasury has sanctioned a Tren de Aragua network accused of using malware to empty ATMs across the United States. Authorities linked the alleged attacks to $40.73 million in reported losses across more than 1,500 incidents as of August …

U.S. Arrests Tech Company Owner for Allegedly Smuggling $300 Million in GPU Servers to China

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

U.S. authorities arrested Greg Lui, the owner of California technology company Earthmade Computer Inc., on October 1, 2026, over an alleged scheme to smuggle more than $300 million in restricted GPU servers to China. The case centers on false customer …