Hackers Abuse Middle East Telecom Networks for Large-Scale Command-and-Control Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using telecom networks and hosting providers across the Middle East as a foundation for massive command-and-control operations, turning trusted infrastructure into a launchpad for cyberattacks. A newly released …

Hackers Use Six-Layer Persistence to Maintain Access on Compromised FreePBX Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 A hacker group known as INJ3CTOR3 has been running an active campaign against FreePBX systems, deploying a newly discovered PHP webshell called JOMANGY that uses six separate …

Ubiquiti Patches Critical UniFi OS Vulnerabilities Allowing Remote Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 Ubiquiti Networks has released urgent security updates to address a series of highly critical vulnerabilities affecting its UniFi OS platform. These severe flaws could allow unauthenticated, remote …

LiteSpeed cPanel Plugin 0-Day Exploited in the wild to Gain Server Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 LiteSpeed has disclosed and patched a critical 0‑day privilege escalation flaw in its user-end cPanel plugin that is already being actively exploited to gain root access on …

CISA adds Langflow Origin Validation Flaw to Known Exploited Vulnerabilities Catalog

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Langflow vulnerability, tracked as CVE-2025-34291, to its Known Exploited Vulnerabilities (KEV) Catalog, signaling active exploitation …

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS …

Operation Dragon Whistle Uses Malicious LNK Files to Target Changzhou University

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 A newly uncovered cyber operation has raised concerns among security professionals after a coordinated wave of attacks targeted government institutions in Pakistan. The campaign, now tracked as …

Canadian Man Arrested for Running KimWolf DDoS Botnet Service that Hacked 2 Million Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 Canadian and U.S. authorities have arrested and charged a 23‑year‑old Ottawa resident for allegedly operating “KimWolf,” a massive Internet‑of‑Things (IoT) DDoS‑for‑hire botnet that weaponized more than a …