Public PoC Released for Critical Rails Active Storage RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 A critical vulnerability in Ruby on Rails has raised new concerns about cloud data breaches, particularly for companies that host customer platforms in Amazon Web Services (AWS). Known as CVE-2026-66066 or KindaRails2Shell, this flaw affects Active Storage …

Hugging Face Diffusers Vulnerabilities Enable Remote Code Execution Through Malicious AI Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A set of high-severity vulnerabilities in Hugging Face’s diffusers library that allow a malicious model repository to silently execute arbitrary code on any machine that loads it. The flaws bypass trust_remote_code, the very safeguard designed to stop unreviewed code from …

TP-Link TL-WR940N Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TP-Link has issued a security advisory regarding a high-severity vulnerability affecting its TL-WR940N V6 wireless router. This vulnerability, tracked as CVE-2026-12935, could allow unauthenticated attackers to trigger a denial-of-service condition or achieve remote code execution on vulnerable devices under certain …

Hackers Exploit VeloCloud Orchestrator Command Injection Vulnerability in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 Security researchers have issued a warning about a critical command injection vulnerability that is being actively exploited in on-premises VeloCloud Orchestrator (VCO) deployments. This vulnerability, tracked as CVE-2026-16812, allows remote attackers to access privileged internal functions and …

Android RAT Survives Reboots Using Watchdog Services and Boot Receivers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 Android users are facing a new remote-access threat that hides behind a fake emergency alert application. The malware, called Octagon, poses as Bahrain’s BH Alert service and leads victims through a convincing setup process designed to win …

ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ModernStealer is the name behind underground posts claiming to offer military, government, nuclear, and aerospace material. The posts appeared on dark web forums and Telegram, making a single alias a concern for public-sector and defence teams. The activity is not …

Internet-Facing SonicWall SMA Appliances Face Zero-Click Root Compromise

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Internet-facing SonicWall Secure Mobile Access, or SMA, appliances face a serious threat after attackers turned two flaws into a route to full VPN-gateway control. The campaign gives an outsider a way to move from a simple web request to root-level …

XCSSET v40 Abuses Chrome DevTools Protocol to Steal Cookies and Run Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

XCSSET has returned with a way to target macOS developers. The latest version, v40, hides inside poisoned Xcode projects and can turn a local build into a supply-chain compromise. Once activated, it can spread through other projects, raising risk for …

MacSync macOS Stealer Uses Fake Claude Guide to Steal Passwords and Crypto Wallets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 Mac users searching for Claude installation help have been led into a dangerous trap. A malicious campaign used a paid search result and a fake guide on a legitimate Claude sharing page to persuade victims to paste …

Critical N-Able N-Central Vulnerability Allows Hackers to Gain god-mode Access to the RMM Console

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 3, 2026 N-able has disclosed a critical security vulnerability in its N-central remote monitoring and management (RMM) platform, which could allow unauthenticated attackers to gain full administrative, or “god-mode,” access to the RMM console. This issue affects all currently …