Motorola Phones Preinstalled App Found Hijacking Amazon App to Inject Affiliate Codes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A hidden system application bundled with Motorola smartphones has been caught intercepting user-initiated Amazon app launches and silently redirecting them through affiliate tracking URLs, raising serious concerns about supply chain integrity, user consent, and undisclosed revenue practices on premium Android …

Attackers Can Exploit BadHost to Access Sensitive AI Agent Server Endpoints

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 A newly disclosed critical vulnerability, tracked as CVE-2026-48710 and dubbed “BadHost,” is putting thousands of AI-powered applications at risk by enabling authentication bypass through manipulated HTTP headers. The flaw affects Starlette versions before 1.0.1, a core framework …

New BTMOB Malware Lets Attackers Remotely Control Android Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 New Android malware dubbed BTMOB is arming even low-skilled attackers with full remote control over infected phones by combining a powerful RAT engine with a no-code campaign builder toolkit. The threat, first seen in 2025, is now …

Link11 is fully committed to Europe and is opening a Customer Excellence Hub in Lisbon

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 Frankfurt am Main, Germany, May 27th, 2026, CyberNewswire Link11, a European provider of cloud-based IT security solutions specializing in network and web application security, is strengthening its commitment to digital sovereignty by opening a ‘Technical Customer Excellence …

Seedworm APT Abuses Signed Fortemedia and SentinelOne Binaries for DLL Sideloading

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 A well-known Iran-linked hacking group has been caught running a far-reaching espionage campaign that touched at least nine organizations across nine countries and four continents in early 2026. The attackers used a clever trick to hide inside …

ROADtools Misused in Cloud Attacks to Steal Tokens and Bypass MFA Controls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 A well-known open-source security framework called ROADtools has been turned against the organizations it was originally built to protect. Once a legitimate red-teaming tool, attackers are now actively weaponizing it to steal authentication tokens, register rogue devices, …

Apple’s New Anti-Snatching Feature Will Auto-Lock iPhones When Stolen From Your Hand

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 Apple is reportedly developing a new iPhone security feature designed to automatically lock the device the moment it detects a theft-in-progress, a significant upgrade to the company’s existing anti-theft protections that could close one of the most …

Developer-Targeting Glassworm Malware Abuses npm, PyPI, OpenVSX, and GitHub

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 A dangerous malware campaign known as Glassworm has been spreading through the tools that software developers trust most every day. By abusing popular platforms like npm, PyPI, OpenVSX, and GitHub, the attackers have turned routine development workflows …

Attackers Abuse Open RDP Ports to Gain Initial Access Into Business Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 There is a decades-old misconfiguration sitting quietly inside countless business networks, and attackers are still making full use of it. Remote Desktop Protocol, or RDP, allows users to connect to and control a computer remotely over a …

GitLab Suspends Windows Exploit Researcher Nightmare-Eclipse After GitHub Ban

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 27, 2026 The anonymous researcher known as Nightmare-Eclipse has been blocked from two major code-hosting platforms in less than a week, as their disruptive public zero-day campaign against Microsoft draws serious real-world consequences. GitLab moved to suspend the account …