Hackers Hid a Remote-Control Toolkit Inside Oracle to Take Over a Windows Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 A routine web application weakness has been tied to a serious Windows Server compromise after attackers used SQL injection to plant a remote-control toolkit inside an Oracle database. The incident shows how a poorly protected form can …

Public PoC Released for Linux Kernel Bridge Use-After-Free Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 A public proof-of-concept has been released for a use-after-free flaw affecting the Linux kernel’s bridge subsystem, specifically its Spanning Tree Protocol implementation in net/bridge. The issue can leave STP timers active after the bridge network device that …

Critical Jenkins Vulnerability Allows Attackers to Execute Malicious Code on Controller

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Jenkins has disclosed a critical security vulnerability that could allow attackers to execute malicious code on a Jenkins controller by bypassing a security filter used in agent-to-controller communications. Tracked as CVE-2026-70426, the flaw affects Jenkins installations using …

OWASP Releases GenAI LLM Top 10 2026 for Building and Securing Modern AI Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 The Open Web Application Security Project (OWASP) has officially released the Top 10 for LLM Applications 2026, a foundational security guide targeting the most critical vulnerabilities across modern AI applications and autonomous agents. The updated edition establishes …

OpenAI Agents Discover Zero-Day and Leave the Door Open for Other Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 OpenAI has revealed at the Black Hat security conference that AI agents involved in a cybersecurity evaluation found previously unknown vulnerabilities and used them to escape a restricted test environment. The event shows how powerful autonomous systems …

Meta Says AI Model Gained Internet Access and Hacked Another Organization’s System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Meta has disclosed that one of its AI models gained unintended access to the internet during a cybersecurity evaluation and then exploited a vulnerability in another organization’s system. The incident occurred during testing conducted with independent AI security firm Irregular, …

CISA Warns of TeamCity RCE Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 The U.S. Cybersecurity and Infrastructure Security Agency has warned that a critical JetBrains TeamCity flaw is being actively exploited. The vulnerability, tracked as CVE-2026-63077, can let an unauthenticated attacker run code remotely on vulnerable TeamCity On-Premises servers. …

250+ macOS ClickFix Domains Use Browser Fingerprinting to Hide Atomic Stealer Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Atomic Stealer is being pushed at Mac users through websites that look harmless. A large ClickFix operation uses more than 250 look-alike domains to steer selected visitors toward a fake download page and a malicious Terminal command. ClickFix is built …

New npm Supply Chain Attack Began with the Keyv Library Compromised Hundreds of Popular Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 A new npm supply chain attack has turned trusted software packages into a route for credential theft. The campaign began after attackers compromised the maintainer account behind the widely used Keyv library, then used that access to …

Apple iCloud Private Relay WebKit Flaws Leak Users’ Real IP Addresses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Apple users who rely on iCloud Private Relay to conceal their online location may not be getting the protection they expect. Newly disclosed flaws in WebKit, the browser engine used across iOS, can allow a website to …