Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A joint cybersecurity advisory from the FBI, CISA, the Department of Defense Cyber Crime Center, the NSA, the U.S. Secret Service, and South Korea’s National Police Agency has exposed a dangerous new wave of attacks by the …

HP ThinPro TPM Disk Encryption Flaw Lets Attackers Extract LUKS Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A security researcher has disclosed a boot-chain weakness in HP ThinPro 8 and 9 that could allow attackers with physical access to a thin client to extract its LUKS disk-encryption key. The issue affects HP thin clients …

Pass-the-Passkey Attacks Expose Windows 11 and Microsoft Entra ID, Bypassing MFA

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Pass-the-Passkey Attacks Expose Windows 11 and Microsoft Entra ID Weaknesses That Can Bypass Phishing-Resistant MFA A new “Pass-the-Passkey” family of attack techniques demonstrates how systemic implementation flaws surrounding WebAuthn can undermine passkey security even when cryptographic private …

CISA Warns of Progress LoadMaster Command Injection Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 CISA has added a critical Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog after attackers were observed targeting exposed devices. Tracked as CVE-2026-8037, the flaw affects Progress LoadMaster and Progress ADC products. It is a command …

Windows WalletService Vulnerability Allows Attackers to Escalate Privileges – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Microsoft has patched a Windows WalletService vulnerability that could let local attackers gain SYSTEM privileges, with a public proof of concept urging organizations to deploy the July 2026 security updates. Tracked as CVE-2026-49176, the issue is an …

GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 GitHub has expanded its malware detection capabilities beyond npm, providing developers with broader protection against malicious open-source packages. Dependabot alerts can now identify harmful dependencies across 8 major package ecosystems: npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, …

Fake GoogleTranslate Chrome Extension Lets Attackers Remotely Control Your Browsers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A malicious Chrome extension masquerading as GoogleTranslate that can steal sensitive browser data, live-stream web sessions, and allow threat actors to remotely interact with Chrome windows while keeping their activity out of the victim’s view. The operation …

Google Play Apps Use Stealth Loaders to Deliver Anatsa Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Android users are facing a fresh reminder that a familiar app-store listing can hide a financial threat. Researchers have observed malicious loaders on Google Play that can prepare the ground for Anatsa, an Android banking Trojan designed …

Ransomware Operators Disable EDR, Backup Software and Windows Telemetry Before Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Ransomware crews are increasingly trying to blind a victim before they encrypt anything. Analysis shows that attackers can disable endpoint detection and response tools, interrupt Windows telemetry, and target backup services to reduce the chance that defenders …

Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files as root during node boot and redirect sensitive AI inference telemetry to an external server. Sentry Security researcher Drinor …