Microsoft Awards Record $20 Million to 562 Researchers in Biggest Bug Bounty Year

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Microsoft has awarded more than $20 million to 562 security researchers through its bug bounty program, marking the largest annual payout in the company’s history. Researchers from 64 countries reported security flaws that could have affected Microsoft …

New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Las Vegas, United States, August 5th, 2026, CyberNewswire Pulse Security AI calls for boards and security leaders to define cyber risk appetite in new report: The CISO-Board Communication Gap Boards of directors believe they understand their company’s …

Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SIngapore, Singapore, August 5th, 2026, CyberNewswire Uppsala Security, a Singapore-based blockchain intelligence and crypto forensics company, announced today that it has joined the Cyber Threat Alliance (CTA) as an Affiliate Member, becoming the first blockchain intelligence company to join the …

Greatness PhaaS Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Greatness has emerged as a phishing-as-a-service platform designed to steal Microsoft 365 access at a time when many organizations assume multi-factor authentication will stop account takeovers. Rather than simply collecting a password, it can capture a valid …

15 TP-Link Omada ZTP Flaws Enable Router Hijacking and Root Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 A set of 15 vulnerabilities in TP-Link’s Omada Zero-Touch Provisioning (ZTP) could enable attacks against enterprise networks, with the findings set to be presented at Black Hat USA 2026. TP-Link Omada is widely used to manage routers, …

Three PhaaS Kits Targeting US Organizations to Steal M65 Logins by Bypassing MFA

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three distinct Phishing-as-a-Service (PhaaS) platforms, Sneaky 2FA, EvilTokens, and EvilProxy, are actively targeting US organizations to steal Microsoft 365 (M365) credentials and session tokens, effectively neutralizing standard multi-factor authentication (MFA) protections. Each kit uses a fundamentally different technical approach: Adversary-in-the-Middle (AiTM) session …

Django Urges Immediate Upgrade to 6.0.8 and 5.2.17 After Four Security Fixes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 The Django development team has released Django 6.0.8 and Django 5.2.17 to fix four security vulnerabilities affecting supported versions of the Python web framework. Developers and administrators are urged to upgrade as soon as possible, especially where …

New OVSwrap Linux Vulnerability Lets Attackers Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-64531 and dubbed OVSwrap, allows unprivileged local users to escalate privileges to root on a wide range of popular Linux distributions. The flaw lives inside the Open vSwitch (OVS) …

Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can become a network-wide problem when attackers gain privileged access. The operators used …

7-Zip Mark-of-the-Web Bypass Lets Malicious Files Evade Windows SmartScreen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Windows can protect users before a suspicious download runs. But a newly documented 7-Zip behavior can remove an important warning layer and allow a malicious program to start without a Windows SmartScreen prompt. ZIP archives are common …