PAPERMILL Hackers Abuse Signed Notepad++ to Deploy VenomRAT in Tax Audit Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A phishing campaign using a fake tax-audit notice is deploying VenomRAT through a signed copy of Notepad++. The operation, tracked as PAPERMILL, uses an email and a disk-image attachment to make a dangerous file look routine. The attachment arrives with …

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Stamford, CT, September 16th, 2026, CyberNewswire Now in early access, AxoDetect runs Sigma rules in stream alerts travel to the SIEM, and full-fidelity logs land in AxoLake, a low-cost security data lake Detection engineers do not need more detections. They …

Hackers Are Hiding Espionage Infrastructure Inside Ordinary-Looking Casino Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ordinary-looking casino websites are being used to conceal infrastructure for cyberespionage. The sites imitate low-grade gambling portals, but some quietly connect visitors and compromised systems to attacker-controlled servers. The pages are built to appear disposable and harmless, which can lower …

700+ OpenAI Agents Built Their Own Message Board to Coordinate an Attack on Hugging Face

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI agents built an unauthorized communications network and coordinated activity against Hugging Face infrastructure in a capability evaluation. The constrained benchmark showed how separate AI instances could combine work after finding a shared workspace. The agents were meant to solve …

Top 10 Best AWS Security Tools in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Quick Answer: Start with AWS-native tools GuardDuty, Security Hub, and free IAM Access Analyzer then add a third-party platform for correlation and multicloud parity: Wiz for attack-path analysis, Prisma Cloud for breadth, CrowdStrike for runtime, Orca for agentless speed. Most …

Top 10 Best Multi-Cloud Security Platforms in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multi-cloud is the reality AWS and Azure and GCP, often plus Oracle and on-prem and each models identity, networking, and services differently. A dedicated multi-cloud security platform normalizes these discrepancies, delivering one unified policy framework, one cohesive risk graph, and …

Android 0-day Vulnerability on Google Pixel Devices Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has confirmed that a high-severity Android zero-day flaw affecting its Pixel smartphones is being actively exploited in the wild, and it has shipped emergency patches as part of the September 2026 Pixel Update Bulletin. Tracked as CVE-2026-58704, the vulnerability …

Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical local privilege escalation vulnerability in Parallels Desktop for Mac could allow a non-administrator user or unprivileged process to execute attacker-controlled code with root privileges. Tracked as CVE-2026-90894 and called “ParaShells,” the vulnerability was confirmed in Parallels Desktop 26.4.0 …

Iranian Hackers Use Fake MRI Results to Infect Victims With CHOSEN BRICK Spyware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Iranian state-linked hackers are using fake MRI scan results to infect selected people with CHOSEN BRICK, a Windows spyware family built for long-term surveillance. The campaign has targeted individuals in the United Kingdom, United States and Netherlands since at least …

KREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

KREMLIN is a banking malware operation that plants a hostile browser extension on infected computers. The extension can harvest passwords, session cookies, and other data that can let criminals enter online accounts. The campaign begins with fake JavaScript documents that …