Hackers Actively Attacking Adobe Reader Users Using Sophisticated 0-Day Exploit

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A highly sophisticated, unpatched zero-day exploit is actively targeting users of Adobe Reader. Detected by the EXPMON threat-hunting system, this malicious PDF file is designed to steal sensitive local data and perform advanced system fingerprinting. The exploit functions flawlessly on …

Anthropic Unveils Claude Mythos Preview With Powerful Zero-Day Detection Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has introduced Claude Mythos Preview, an advanced language model with extraordinary capabilities for discovering and autonomously exploiting undiscovered zero-day vulnerabilities. To ensure these powerful tools are used defensively, the company has launched Project Glasswing to collaborate with industry partners and …

Microsoft Confirms Recent Windows 11 Update Breaks Start Menu Function

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has acknowledged a server-side issue that disrupted Start Menu search functionality for a subset of Windows 11 23H2 users, and has since deployed a fix to address the problem without requiring users to install any additional updates. The issue, …

Google Expands Chrome Lazy Loading to Video and Audio in New Browser Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google is bringing a major performance enhancement to its browser by expanding native lazy loading capabilities to include video and audio elements. By adding the loading=”lazy” attribute directly to <video> and <audio> HTML tags now allow developers to defer the download of heavy media resources until …

Amazon S3 Files, Turns S3 Buckets as File System to Access Your Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amazon Web Services (AWS) has introduced a major update to its cloud storage infrastructure with the launch of Amazon S3 Files. This new feature allows organizations to access their Amazon S3 buckets directly as fully functional shared file systems, eliminating …

Docker Vulnerability Let Attackers Bypass Authorization and Gain Host Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered high-severity vulnerability in Docker Engine could allow attackers to bypass authorization plugins and potentially gain unauthorized access to the underlying host system. Tracked as CVE-2026-34040, this security flaw stems from an incomplete patch for a previously known …

Indian Bank Warns Users of Fake LPG Payment and KYC Update Scams to Steal Banking Info

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Indian Bank has issued an urgent cybersecurity advisory warning its customers about a rapidly spreading wave of fraudulent LPG payment and KYC update messages that are being used to steal banking credentials and drain accounts. Cybercriminals are exploiting growing public …

Multiple OpenSSL Vulnerabilities Exposes Sensitive Data in RSA KEM Handling

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenSSL has released a broad April 2026 security update that fixes seven vulnerabilities across supported branches, led by CVE-2026-31790, a moderate-severity flaw in RSA KEM RSASVE encapsulation that can expose uninitialized memory to a malicious peer. The advisory directs users …

FBI Disrupts Russian Router Hijacking Operation Compromised Thousands of Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Justice Department and the FBI have successfully dismantled a massive cyberespionage network in a court-authorized takedown dubbed “Operation Masquerade.” Announced on April 7, 2026, the technical operation neutralized thousands of compromised small office/home office (SOHO) routers that were …

Claude Uncovers 13-Year-Old RCE Flaw in Apache ActiveMQ in Just 10 Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical remote code execution (RCE) vulnerability has been disclosed in Apache ActiveMQ Classic, a flaw that sat undetected for over a decade and was ultimately discovered not by a human researcher manually combing through code, but by Anthropic’s Claude …