ClearFake Uses BSC Testnet Smart Contracts for Takedown-Resistant Command and Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new and dangerously clever malware campaign called ClearFake has been caught using blockchain smart contracts to run its operations, making it nearly impossible for security teams to shut it …

New Linux CIFSwitch Kernel Vulnerability Allows Attackers to Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 A newly disclosed Linux local privilege escalation (LPE) vulnerability dubbed “CIFSwitch” enables low-privileged users to gain root access by abusing a logic flaw between the Linux kernel …

Carnival Cruise Data Breach Exposes Millions of Customers’ Personal Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 Carnival Corporation, the world’s largest cruise company and parent of Carnival Cruise Line, has begun notifying customers of a significant cybersecurity breach that exposed sensitive personal data …

Hackers Use GHOSTYNETWORKS and OMEGATECH to Host JS Malware Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 In March 2026, a wave of malicious spam emails began hitting inboxes across multiple countries and industries. Threat actors were quietly distributing a JavaScript-coded backdoor, targeting organizations …

Gitea Container Vulnerability Exposes Private Container Images to Attackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 A critical security vulnerability in Gitea’s built-in container registry exposes private container images to unauthenticated attackers, raising significant concerns for organizations that rely on self-hosted Git and …

Top 10 Best Static Application Security Testing (SAST) Tools for Security Teams in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Best Static Application Security Testing Tools The rapid acceleration of software development cycles has placed immense pressure on security operations. As engineering teams push code to production multiple times a …

Veeam Backup & Replication Tool Vulnerability Enables Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 Veeam has addressed a high-severity vulnerability in its Backup & Replication platform that could enable attackers to escalate privileges and gain deeper access to enterprise systems. The …

Silent Ransom Group Targets Law Firms With IT Support Impersonation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 A threat group known as the Silent Ransom Group is actively targeting US-based law firms using a bold and deceptive social engineering playbook. Rather than deploying ransomware …

SBI Warns of Scammers are Sending Fake Messages Claiming Your YONO App Will be Deactivated

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 A new wave of social engineering attacks is targeting millions of State Bank of India customers across the country. Fraudsters are sending fake messages warning users that …

FortiClient Code Execution Vulnerability Exploited to Deploy EKZ Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 28, 2026 A newly observed exploitation campaign targeting FortiClient Endpoint Management Server (EMS) has weaponized trusted administrative infrastructure to silently deploy a previously unreported credential stealer across managed enterprise …