Critical SolarWinds Flaw Lets Attackers Bypass Web Help Desk SAML Login

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 31, 2026 SolarWinds has patched a critical security vulnerability in its Web Help Desk platform that could allow attackers to bypass SAML-based authentication. CVE-2026-28323 affects SolarWinds Web Help Desk deployments using SAML 2.0 single sign-on (SSO)and was fixed in …

ShutterGap Exposes Millions of AWS Resources Between Cloud Security Scans

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 31, 2026 Cloud security teams often utilize Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) tools to identify risky configurations. However, new research from Aryon Security reveals that this approach may overlook a significant class of …

The Gentlemen Ransomware Kills Nearly 180 Security Processes Before Encrypting Your Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 31, 2026 The Gentlemen ransomware operation is drawing attention for its aggressive effort to disable security software before locking files. Instead of relying only on fast encryption, the attackers attempt to remove the tools that could detect, block, or …

PHP Patches Three Flaws Enabling SQL Injection, Memory Corruption and Server Crashes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 31, 2026 PHP has addressed three security vulnerabilities in its latest maintenance releases, including high-severity flaws that can expose applications to SQL injection and out-of-bounds memory writes. These vulnerabilities affect optional PHP extensions commonly used by web applications: ext-pgsql, …

CMMC Phase II Is Paused, But Contractors’ Data-Security Obligations Are Not

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

By John Grancarich, EVP, Head of Defense & Intelligence, Fortra The recent pause affecting the implementation of Cybersecurity Maturity Model Certification (CMMC) Phase II has understandably generated questions across the Defense Industrial Base (DIB). For many organizations, the immediate reaction has been …

New Backdoors Let Hackers Keylog, Steal Passwords and Control Government Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 31, 2026 Government networks in Central Asia have been hit by two custom-built backdoors that give intruders deep control over infected computers. Known as OctLurk and SilkLurk, the tools can record keystrokes, collect browser passwords, steal email, and run …

Anthropic Confirms Claude Hacked 3 Organizations by Breaking Test Environment

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has disclosed that its Claude AI models gained unauthorized access to the real systems of three organizations after reaching the open internet from what should have been sealed cybersecurity evaluation environments. The company said the findings emerged from a …

CISA Warns of Cisco Secure Firewall Management 0-Day Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 CISA has issued a warning regarding a serious vulnerability in the Cisco Secure Firewall Management Center (FMC), which is currently being exploited in attacks. The flaw, identified as CVE-2026-20316, affects Cisco’s centralized management platform for firewall solutions …

Read This Before You Buy That TV Streaming Stick

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a …

OpenMatter Network Calls on Enterprise Leaders to Rethink AI Security Before the Next Rogue AI Crisis

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 Melbourne, Florida, July 30th, 2026, CyberNewswire The growing number of high-profile AI security incidents making headlines around the world are not simply cybersecurity failures. They are architectural failures, according to OpenMatter Network Co-Founder and CEO Renee Davis. …