Critical Vulnerability In Flowise Allows Remote Command Execution Via MCP Adapters

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Flowise and multiple AI frameworks has been discovered by OX Security, exposing millions of users to remote code execution (RCE). The flaw stems from the Model Context Protocol (MCP), a widely used communication standard for AI …

Vercel Confirms Data Breach — Hackers Claim Access to Internal Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Vercel has disclosed a significant security incident after threat actors gained unauthorized access to internal systems, with a hacker group reportedly attempting to sell stolen data for $2 million on underground forums. Vercel, one of the most widely used frontend …

Microsoft Teams Right-Click Paste Broken Following Edge Browser Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A confirmed bug in Microsoft Teams desktop client version 26072.519.4556.7438 is disabling the right-click paste option for users on Windows and macOS, with Microsoft attributing the root cause to a code regression introduced in a recent Microsoft Edge browser update. …

OpenAI Expands Cyber Defense Program With GPT-5.4-Cyber Access for Trusted Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has officially launched the expanded phase of its Trusted Access for Cyber program. Granting select organizations access to its specialized GPT-5.4-Cyber model to strengthen digital defenses across critical infrastructure, financial services, and open-source security communities. The program operates on a tiered trust model …

Apple Works on Fix for iPhone Passcode Bug Linked to Missing Czech Keyboard Character

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple is reportedly developing a software fix for a frustrating iOS 26 bug that has left some users entirely locked out of their iPhones for months. According to a recent report by The Register, Cupertino’s software engineers are scrambling to …

Researcher Uses Claude Opus to Build a Working Chrome Exploit Chain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amidst the heated debate surrounding Anthropic’s recent announcement of its Mythos and Project Glasswing models, a security researcher has demonstrated the tangible cybersecurity implications of frontier AI. Moving beyond theoretical warnings, the researcher successfully utilized Claude Opus to construct a …

Fiverr Allegedly Leaks User Information to Google Indexing, Researchers Say

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Freelance service platform Fiverr is facing a significant privacy incident after researchers discovered that sensitive customer files are publicly accessible and indexed by Google search. According to a recent disclosure on Hacker News, an insecure file-hosting configuration has exposed personal …

Nexcorium-Associated Mirai Variant Uses TBK DVR Exploit to Scale Botnet Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new iteration of the notorious Mirai botnet, dubbed Nexcorium, has emerged in the wild, aggressively targeting internet-connected video recording devices. According to recent threat research published by Fortinet’s FortiGuard Labs, threat actors are exploiting a known command injection vulnerability …

Nearly 6 Million Internet-Facing FTP Servers Still Exposed in 2026, Censys Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to a recent April 2026 report by security researcher Himaja Motheram at Censys, just under 6 million internet-facing hosts are still running the File Transfer Protocol (FTP). While this marks a significant 40% decline from the 10.1 million servers …

PoC Exploit Released for FortiSandbox Vulnerability that Allows Attacker to Execute Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been publicly released for a critical vulnerability in Fortinet’s FortiSandbox product, tracked as CVE-2026-39808. The flaw allows an unauthenticated attacker to execute arbitrary operating system commands as root, the highest privilege level, without requiring any login …