Papyrus Mobile Ad Fraud Uses Hidden WebViews to Fake Clicks, Scrolls and Attention

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Papyrus is a mobile ad fraud operation hiding behind apps built for reading serialized fiction. While people turn pages and follow stories, the apps can quietly open websites in the background and create traffic. The scheme takes …

Multiple Flaws in Enterprise Java Platforms Allow Attackers to Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Enterprise Java platforms remain attractive targets because middleware often exposes paths developers assumed were internal. New research presented for Black Hat 2026 describes 12 flaws across products, including a sandbox escape and four pre-authentication issues. The serious …

Shai-Hulud CHAINDROP Worm Backdoors 400+ npm Packages With 1.3 Billion Monthly Downloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Shai-Hulud is back in the npm ecosystem, and this time its reach is unusually broad. A new self-propagating malware strain called CHAINDROP has backdoored more than 400 packages after attackers compromised the maintainer of the widely used …

Kimi K3 AI Model Escapes Sandbox During Security Test to Fetch Answers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Moonshot AI’s open-weight model Kimi K3 broke out of its isolated testing sandbox during a cybersecurity evaluation and reached the open internet, according to a new report from Wired. The incident, uncovered by US startup Frontier Security, …

Zbtlink Chinese Router Sold Worldwide Contains a Hidden Backdoor Affecting 20+ Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zbtlink routers sold in global markets have been found carrying a hidden remote-control implant that starts with the device. The discovery affects equipment used in homes, offices, temporary sites and vehicles, turning a trusted network gateway into a potential entry …

Top 10 Best Protective DNS (PDNS) Services in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Top 10 Best Protective DNS (PDNS) Services in 2026 Protective DNS went from best practice to expectation: NSA and CISA jointly recommend it, national programs run it at population scale, and it remains the highest-leverage, lowest-friction control most organizations can …

SilverFox Hijacks Trusted Software and Kernel Drivers to Disable Security Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 SilverFox has expanded its malware toolkit in a campaign that targeted a Japanese industrial manufacturer. The attackers used a fake invoice email to lure a recipient into downloading a ZIP archive hosted through services that normally appear …

4,400+ Internet-Exposed Rockwell PLCs Expose Water Systems to Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 A wave of cyberattacks against U.S. water and wastewater utilities has renewed alarm over how many industrial controllers remain directly reachable from the public internet. New research from Forescout has identified 4,407 internet-facing Rockwell Automation/Allen-Bradley programmable logic …

Canadian Man Pleads Guilty in Snowflake Extortions

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor …

Vanta Stealer Empties Browser Vaults, Crypto Wallets and Gaming Accounts in Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Vanta Stealer is a newly analyzed information-stealing malware built to strip valuable data from an infected computer quickly. It reaches far beyond saved browser passwords, pulling cookies, payment details, account tokens, wallet files and private documents into …