Nintendo Switch Vulnerability Allows Attackers to Run Unauthorized Code on Your Console

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nintendo has patched a high-severity vulnerability in the original Nintendo Switch that could let a nearby attacker execute unauthorized code and access information stored on the console. Tracked as CVE-2026-82079, the flaw affects firmware earlier than 23.0.0 and resides in …

Microsoft Offers Up to $30,000 for Critical AI Flaws in Dynamics 365 and Power Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is offering security researchers up to $30,000 for finding critical AI vulnerabilities in Dynamics 365 and Power Platform, sharpening its focus on flaws that could manipulate AI inference or expose information through model behavior. The program covers qualifying bugs …

AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access sensitive link-local services, including the Amazon EC2 Instance Metadata Service. The flaw, tracked as CVE-2026-89049, affects Amazon SSM Agent versions earlier …

Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A browser extension promoted as a Twitch viewing helper has been found sending live account tokens through servers controlled by its operator. The add-on, called “Twitch Enhanced Viewer | JeetBot,” was available to Chrome and Firefox users and advertised conveniences …

WhatsApp’s New Restricted Chat Feature Locks Conversation on Your Primary Phone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp is developing a new privacy control called Restricted Chat that will keep selected conversations accessible only from a user’s primary mobile phone. The feature is designed to prevent protected chats from syncing to WhatsApp Web, desktop sessions, and secondary …

Cyclops Blink Evolves Into x86-64 Linux Implant With Packet Sniffing and Internal Network Scanning

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyclops Blink has returned in a form that gives attackers a deeper view inside corporate networks. The malware was found on compromised Cisco Firewall Management Center devices, where it can maintain remote access, inspect traffic, and map systems behind the …

New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Linux kernel vulnerability dubbed ZcopyReaper allows an unprivileged local attacker to escalate privileges and potentially gain root-level control. Tracked as CVE-2026-43502, the flaw was demonstrated through an exploit called ZcopyReaper by security researchers at NebuSec. This vulnerability affects the Reliable …

One Click on a Malicious Link Lets Hackers Backdoor Sogou Input Method Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A single click on a malicious link could have given attackers a direct path into Windows systems running Sogou Input Method. The flaw turned a commonly installed Chinese-language typing tool into an entry point for the GRAYRABBIT backdoor, exposing users …

Hackers Leverage Claude to Exfiltrate Secrets from 1.8M Android apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals linked to the ShinyHunters ecosystem used Claude to support a large-scale credential theft operation that downloaded, decompiled, and scanned 1.8 million Android applications for hardcoded secrets. The campaign shows how AI-assisted workflows can turn exposed mobile-app credentials into a …

Microsoft Confirms Remote Desktop Services Might Stop Working Following Sept. 2026 Security Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed that its September 2026 Windows security updates can destabilize Remote Desktop Services (RDS), potentially disrupting remote administration across a broad range of enterprise endpoints and servers. Last week, Windows administrators worldwide experienced this serious bug in Remote …