AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access sensitive link-local services, including the Amazon EC2 Instance Metadata Service. The flaw, tracked as CVE-2026-89049, affects Amazon SSM Agent versions earlier …

Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A browser extension promoted as a Twitch viewing helper has been found sending live account tokens through servers controlled by its operator. The add-on, called “Twitch Enhanced Viewer | JeetBot,” was available to Chrome and Firefox users and advertised conveniences …

WhatsApp’s New Restricted Chat Feature Locks Conversation on Your Primary Phone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsApp is developing a new privacy control called Restricted Chat that will keep selected conversations accessible only from a user’s primary mobile phone. The feature is designed to prevent protected chats from syncing to WhatsApp Web, desktop sessions, and secondary …

Cyclops Blink Evolves Into x86-64 Linux Implant With Packet Sniffing and Internal Network Scanning

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyclops Blink has returned in a form that gives attackers a deeper view inside corporate networks. The malware was found on compromised Cisco Firewall Management Center devices, where it can maintain remote access, inspect traffic, and map systems behind the …

New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Linux kernel vulnerability dubbed ZcopyReaper allows an unprivileged local attacker to escalate privileges and potentially gain root-level control. Tracked as CVE-2026-43502, the flaw was demonstrated through an exploit called ZcopyReaper by security researchers at NebuSec. This vulnerability affects the Reliable …

One Click on a Malicious Link Lets Hackers Backdoor Sogou Input Method Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A single click on a malicious link could have given attackers a direct path into Windows systems running Sogou Input Method. The flaw turned a commonly installed Chinese-language typing tool into an entry point for the GRAYRABBIT backdoor, exposing users …

Hackers Leverage Claude to Exfiltrate Secrets from 1.8M Android apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals linked to the ShinyHunters ecosystem used Claude to support a large-scale credential theft operation that downloaded, decompiled, and scanned 1.8 million Android applications for hardcoded secrets. The campaign shows how AI-assisted workflows can turn exposed mobile-app credentials into a …

Microsoft Confirms Remote Desktop Services Might Stop Working Following Sept. 2026 Security Update

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed that its September 2026 Windows security updates can destabilize Remote Desktop Services (RDS), potentially disrupting remote administration across a broad range of enterprise endpoints and servers. Last week, Windows administrators worldwide experienced this serious bug in Remote …

GitHub Pays $100,000 Bounty for Critical RCE Flaw in Git Push Pipeline

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitHub has awarded security researcher Saif Ghani a $100,000 bug bounty after the disclosure of CVE-2026-3854, a critical remote code execution vulnerability affecting GitHub’s Git push processing pipeline. The reward is reportedly the largest publicly disclosed payment made through GitHub’s …

Hackers Deploy Casbaneiro Banking Trojan That Activates When Victims Open Bank Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Casbaneiro is targeting online banking users in Latin America through phishing messages that look like urgent invoices or legal notices. The campaign uses personalised PDF lures to push recipients toward a malicious download chain, putting email data, banking activity and …