CISA Warns of TeamCity RCE Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 The U.S. Cybersecurity and Infrastructure Security Agency has warned that a critical JetBrains TeamCity flaw is being actively exploited. The vulnerability, tracked as CVE-2026-63077, can let an unauthenticated attacker run code remotely on vulnerable TeamCity On-Premises servers. …

250+ macOS ClickFix Domains Use Browser Fingerprinting to Hide Atomic Stealer Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Atomic Stealer is being pushed at Mac users through websites that look harmless. A large ClickFix operation uses more than 250 look-alike domains to steer selected visitors toward a fake download page and a malicious Terminal command. ClickFix is built …

New npm Supply Chain Attack Began with the Keyv Library Compromised Hundreds of Popular Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 A new npm supply chain attack has turned trusted software packages into a route for credential theft. The campaign began after attackers compromised the maintainer account behind the widely used Keyv library, then used that access to …

Apple iCloud Private Relay WebKit Flaws Leak Users’ Real IP Addresses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Apple users who rely on iCloud Private Relay to conceal their online location may not be getting the protection they expect. Newly disclosed flaws in WebKit, the browser engine used across iOS, can allow a website to …

Cisco Patched Multiple Critical Vulnerabilities in Catalyst SD-WAN – Update Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 6, 2026 Cisco has rolled out software hardening updates for its Catalyst SD-WAN Software after an internal security review uncovered multiple critical vulnerabilities affecting the platform. The flaws were identified proactively by Cisco’s own engineering team rather than through …

Google Blogger Locked Legitimate Websites After Mistaking Them for Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Thousands of Blogger website owners woke up this week to a jarring surprise: their perfectly legitimate blogs had been locked and slapped with a “Malware and Similar Malicious Content” violation notice. The mass lockout, which began on …

Hackers Turned Microsoft Logins, Zoom Events, and Government Websites Into Attack Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers Turned Microsoft Logins, Zoom Events, and Government Websites Into Attack Tools Cybercriminals spent July 2026 proving that trusted business utilities including Microsoft authentication pages, Zoom event invitations, and official government portals can be weaponized against enterprise targets. Threat intelligence …

Poison Claude is Selling Cheap AI Tokens Built on Fake Accounts and Free Credits

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 A shadowy online service called Poison Claude is reselling access to Anthropic’s premium AI models at a significant discount. Researchers suggest that these savings are coming from an unexpected source: cloud accounts that have been fraudulently registered …

Microsoft Awards Record $20 Million to 562 Researchers in Biggest Bug Bounty Year

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Microsoft has awarded more than $20 million to 562 security researchers through its bug bounty program, marking the largest annual payout in the company’s history. Researchers from 64 countries reported security flaws that could have affected Microsoft …

New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 5, 2026 Las Vegas, United States, August 5th, 2026, CyberNewswire Pulse Security AI calls for boards and security leaders to define cyber risk appetite in new report: The CISO-Board Communication Gap Boards of directors believe they understand their company’s …