New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs  

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, ANY.RUN researchers uncovered N0va, a new phishkit targeting organizations across North America and the EU, including government, technology, consulting, and healthcare.  What makes N0va especially relevant for SOC leaders is how it spreads the attack across different layers. Legitimate authentication, trusted brand lures, …

Hackers Use Hundreds of AI Agents to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Russian-speaking threat actor has weaponized artificial intelligence at an unprecedented scale, deploying hundreds of autonomous AI agents to exploit critical vulnerabilities in PaperCut NG/MF print management software and compromise at least 440 servers across 395 organizations in 48 countries. …

ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ClearFake has expanded a fake CAPTCHA scam into a chain that steals cryptocurrency and credentials while disabling endpoint protection. It turns compromised websites into launchpads, relying on visitors to run a command that appears routine. The operation begins with injected …

Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to …

MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting vulnerability in the widely used MapLibre GL JS library could expose applications and an estimated 2.7 million users to zero-click attacks. The flaw, tracked as CVE-2026-85061 and GitHub Security Advisory GHSA-jrc7-96c5-q579, affects maplibre-gl versions 6.4.0 and …

Microsoft Expands Windows Family Safety With Built-In Age Verification and Parental Controls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is expanding Windows Family Safety with account-based age verification, privacy-focused age signals, and improved parental controls. The company said the updates are designed to help Windows apps, games, services, and AI experiences provide protections that match a user’s age. …

Critical ArangoDB Flaws Allow Authentication Bypass and Remote Code Execution as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical flaws in ArangoDB can let an outsider bypass login controls, read or alter database data, and then gain root-level code execution on the underlying host. The issues affect installations through version 3.12.10.1, creating serious risk for internet-facing databases …

Android Security Update September 2026 – Fix for Critical Flaws that Enable RCE Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released the Android Security Bulletin for September 2026, addressing several critical vulnerabilities that could let attackers execute code remotely on affected devices. The update, published on September 8, includes security patch levels dated 2026-09-01 and 2026-09-05. Android users should …

CISA Warns of N-able N-central RCE Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency has added a maximum-severity flaw in N-able’s N-central remote monitoring and management platform to its Known Exploited Vulnerabilities catalog, confirming that attackers are actively abusing the bug against real-world targets. The vulnerability, tracked as …

Microsoft Teams for Android Vulnerability Exposes Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released a security update for CVE-2026-65812, a vulnerability in Microsoft Teams for Android that could allow an authorized attacker to disclose sensitive information, including user credentials. Microsoft published the flaw on September 8, 2026, and rates it as …