Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access Palo Alto Networks has released its August 12, 2026 security bulletin, disclosing 11 new vulnerabilities affecting PAN-OS, the GlobalProtect App, Prisma Access Agent, and …

New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide A newly identified threat actor is running a large-scale, long-running cyber campaign targeting Salesforce Experience Cloud sites and ServiceNow Service Portals globally. Dubbed the “City-Forum Campaign” after a …

China-linked Hackers Using AI Agents to Attack Taiwan Government Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Suspected China-linked attackers have carried out what researchers describe as the first fully autonomous cyberattack on a foreign government, using open-source artificial intelligence tools to breach Taiwanese government websites and critical infrastructure. The operation, uncovered by Israeli …

Critical Adobe ColdFusion Vulnerabilities Allow Attackers to Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has issued critical security updates for ColdFusion 2025 and ColdFusion 2023, addressing multiple vulnerabilities that could allow threat actors to execute arbitrary code, bypass security controls, escalate privileges, expose sensitive memory, or disrupt application availability. Given the potential impact …

WhatsApp Unveils New Scam Alert Feature to Protect Users from Social Engineering Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp has announced a new optional feature called Scam Alert, designed to warn users about potential scam messages using an on-device machine learning model, without compromising the platform’s end-to-end encryption. As scam tactics evolve from simple impersonation to sophisticated AI-generated …

Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure A threat actor operating under the handle EclipseSupport is actively promoting a new Ransomware-as-a-Service (RaaS) operation named Eclipse Ransomware on cybercrime forums. The group is recruiting …

Google Chrome 151 Patches Five High-Severity Use-After-Free Flaws in V8, Blink, and Extensions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Google Chrome 151 Patches Five High-Severity Use-After-Free Flaws in V8, Blink, and Extensions Google has officially released Chrome 151 to the Stable channel, mitigating five high-severity security vulnerabilities impacting key browser engine components, including the V8 JavaScript …

Hackers Actively Exploiting VMware vCenter Systems to Gain and Maintain Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Hackers Actively Exploiting VMware vCenter Systems to Gain and Maintain Remote Access An active cyberattack campaign targeting internet-accessible VMware vCenter instances. During recent incident-response engagements, security analysts uncovered evidence that advanced persistent threat (APT) actors are actively …

737 Fake Chrome VPN Extensions Hijack Browser Traffic Through Attacker-Controlled SOCKS5 Proxies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Hundreds of Chrome extensions advertised as free VPN or proxy tools have been tied to a large traffic-redirection operation. The listings promised privacy and access to blocked services, but their code sent browser sessions through SOCKS5 proxy …

2.86 Billion Credentials Flood Criminal Markets as Enterprise Access Moves Upmarket

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 12, 2026 Stolen login data is so abundant that criminal markets can sell it for almost nothing. Meanwhile, verified entry into large companies commands far higher prices, reshaping the underground economy. Infostealer malware drives that divide. It reaches victims …