Google Cloud’s Vertex AI platform Vulnerability Allow Attackers to Access Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Artificial intelligence agents are rapidly becoming integral to enterprise workflows, but they also introduce new attack surfaces. Security researchers recently uncovered a significant vulnerability within Google Cloud Platform’s Vertex AI Agent Engine. By exploiting default permission scoping, attackers could weaponize …

Hackers Actively Exploiting Critical WebLogic RCE Vulnerabilities in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent cybersecurity study reveals that threat actors are moving faster than ever to weaponize new software flaws. According to data collected from a high-interaction honeypot, hackers are actively exploiting a newly disclosed, maximum-severity vulnerability in Oracle WebLogic Server. The …

Russian Hackers Using Remote Access Toolkit “CTRL” for  RDP Hijacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed Russian-linked remote access toolkit called “CTRL” is being used to hijack Remote Desktop Protocol sessions and steal credentials from Windows systems. According to Censys ARC, the malware is a custom .NET framework that combines phishing, keylogging, reverse …

Hackers Hijack Hotel Booking Workflows to Scam Guests With Fake Payment Requests

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Travelers across the world are being targeted by a fast-growing fraud scheme that turns their own hotel reservations against them. Cybercriminals are hijacking trusted hotel booking workflows to deliver convincing fake payment requests to guests — and many victims never …

Cisco Source Code and Data Leak Allegedly Claimed by ShinyHunters

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious cybercriminal group ShinyHunters has allegedly claimed responsibility for three separate data breaches targeting Cisco Systems, Inc., asserting that over 3 million Salesforce records containing personally identifiable information (PII), GitHub repositories, AWS S3 buckets, and other sensitive internal corporate …

Windows 11 Emergency Update to Fix Installation Loop Issues

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft just released an emergency out-of-band update to resolve a persistent installation failure affecting Windows 11 users. Released on March 31, 2026, update KB5086672 specifically targets systems running Windows 11 versions 25H2 and 24H2. This patch addresses a critical setup …

North Korean Hackers Compromise Widely Used Axios Package to Infect Windows, macOS, and Linux Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A major software supply chain attack has struck the JavaScript ecosystem after threat actors slipped a malicious dependency into the widely used axios NPM package. The poisoned releases, axios 1.14.1 and 0.30.4, pulled in plain-crypto-js and quietly delivered the WAVESHAPER.V2 …

Hackers Backdoor Telnyx Python SDK on PyPI to Steal Credentials Across Windows, macOS, and Linux

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor group known as TeamPCP has been caught backdooring the Telnyx Python SDK on PyPI — a popular cloud communications library with over 700,000 downloads in February alone. On March 27, 2026, two malicious versions of the package, …

New npm Supply Chain Attack Uses undicy-http to Deploy Screen-Streaming RAT and Browser Injector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious npm package named undicy-http has surfaced inside the Node.js developer ecosystem, quietly compromising machines of developers who mistakenly install it. The package impersonates undici, the official HTTP client library bundled with Node.js that handles millions of weekly downloads. Despite sharing a …

PNG Vulnerabilities Allow Attackers to Trigger Process Crashes, Leak Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two high-severity vulnerabilities have been discovered in libpng, the widely used reference library for reading and writing PNG images. These flaws allow attackers to trigger process crashes, leak sensitive information, and potentially execute arbitrary code by convincing a system to …