The Phishing Kit That Turned Microsoft’s Login Flow Into an AI-Powered Fraud Machine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

EvilTokens turns a Microsoft sign-in into a route to corporate email fraud. The phishing kit, first seen in February 2026, tricks people into approving an attacker’s login through a real device code process without handing over a password. The lure …

The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware has moved into tools developers use to build and manage cloud infrastructure. A campaign linked to Graphalgo planted a remote access program in Terraform providers and Go software packages, turning routine development work into a possible route onto valuable …

AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyberattacks are increasingly built around familiar actions: signing in, approving a payment, or using a trusted app. Artificial intelligence can help attackers repeat those actions at speed, making financial fraud and network intrusion harder to spot before damage is done. …

A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A free television offer led Android users to a dangerous download. Ads for a streaming service urged them to install an app that could give criminals control of their phones, rather than access to shows. The malware behind the campaign …

Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SolarWinds released Observability Self-Hosted 2026.2.3 to fix two serious vulnerabilities that could let unauthenticated attackers remotely execute code on affected observability servers. The flaws, tracked as CVE-2026-28324 and CVE-2026-28325, affect specific non-default configurations and communication modes. The update was released …

Top 10 Best Decentralized Identity Solutions in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

EU digital identity and GDPR compliance mandates, deepfake-driven fraud in authentication and verification, and credential-reuse fatigue pushed decentralized identity from conference-talk to contract. We scored ten players on standards depth, production evidence, and enterprise readiness and flagged the market’s churn …

Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access Through Windows Login Screen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ManageEngine has fixed a critical remote code execution vulnerability in ADSelfService Plus that could allow an unauthenticated attacker to run code as NT AUTHORITYSYSTEM through a Windows device’s login screen. The flaw, tracked as CVE-2026-74849, affects the product’s GINA client …

Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has released Chrome 154 for Windows, macOS, and Linux, fixing 108 security vulnerabilities, including several critical memory-safety flaws that could potentially allow attackers to execute code through malicious web content. The update is rolling out gradually as Chrome 154.0.8037.57 …

Top 10 Best Secrets Management Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Machine identities now outnumber humans many times over, and a single API key in a public repo can undo a security program. We scored ten secrets managers on rotation depth, integration reach, and cost clarity. HashiCorp Vault ranks #1 the …

ChatGPT Computer History Feature Creates New Attack Surface for macOS Infostealers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new feature in ChatGPT now records your actions on your Mac, creating a detailed, plain-text diary of your work. This unencrypted log is vulnerable to cybercriminals, offering them an easy target. Released by OpenAI in mid-August 2026 and available …